CVE-2014-2560

The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers…

published February 12, 2020

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01684 · 76.7th percentile
Published
2020-02-12T13:28Z
EPSS history
Timeline
  • 12 FEB 13:28Z
    The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers…
    cvelistv5