Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/06/23 8:41 a.m.•17 views

CVE-2025-45784

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVISUSERPASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially...

9.8CVSS6.9AI score0.00557EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/18 2:15 p.m.•22 views

CVE-2025-45784

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVISUSERPASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially...

9.8CVSS0.00557EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/06/18 12:00 a.m.•25 views

CVE-2025-45784

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVISUSERPASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially...

0.00557EPSS
SaveExploits1References2
CVE
CVE
•added 2025/06/18 12:00 a.m.•51 views

CVE-2025-45784

The D-Link DPH-400S/SE VoIP Phone (v1.01) contains hardcoded provisioning variables, specifically PROVIS_USER_PASSWORD , within its firmware binary. Due to this insecure storage of sensitive information, an attacker with access to the firmware image can use static analysis tools like strings or x...

9.8CVSS6.2AI score0.00557EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/18 12:00 a.m.•8 views

CVE-2025-45784

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVISUSERPASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially...

9.3AI score0.00557EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2009/02/02 12:00 a.m.•21 views

D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite

No description provided by source. D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. html form action="http://10.1.1.166/Forms/cbiSetSWUpdate?16640,0,0,0,0,0,0,0,0"...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/01/30 12:00 a.m.•34 views

D-Link VoIP Phone Adapter XSRF / XSS

D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be used for csrf bypass:...

0.5AI score
SaveExploits0
zdt
zdt
•added 2009/01/29 12:00 a.m.•27 views

D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite

Exploit for hardware platform in category remote exploits ============================================================ D-Link VoIP Phone Adapter XSS/XSRF Remote Firmware Overwrite ============================================================ D-link VoIP Phone Adapter XSS and XSRFremote firmware...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/01/29 12:00 a.m.•24 views

D-Link VoIP Phone Adapter - Cross-Site Scripting Cross-Site Request Forgery Remote Firmware Overwrite

D-Link VoIP Phone Adapter - Cross-Site Scripting Cross-Site Request Forgery Remote Firmware Overwrite D-link VoIP Phone Adapter XSS and XSRFremote firmware overwrite model number: DVG-2001s f/w version 1.00.007 Better than just remote code execution, you control the firmware. and xss which can be...

0.4AI score
SaveExploits0
Rows per page
Query Builder