CVE-2014-2560

The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-02-12

Last modified

2024-08-06

Weaknesses

CWE-916

Affected products

• Phonerlite (Phoner)

References

• https://seclists.org/bugtraq/2014/Mar/185