high7.5Public exploit code
CVE-2014-2560
The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure2014-04-01 · remote · windows
Impact
The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoner | Phonerlite | before 2.15 |