CVE-2009-5140

The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it…

published February 12, 2020

CVSS
—
EPSS
1%
Percentile
71.5
In the wild
Unconfirmed
What it is

The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01361 · 71.5th percentile
Published
2020-02-12T13:28Z
EPSS history
Timeline
  • 12 FEB 13:28Z
    The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it…
    cvelistv5