CVE-2023-43960

CVE-2023-43960 affects the D-Link DPH-400SE FRU firmware 2.2.15.8. The issue allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access component. The Red Hat advisory and other sources corroborate a privilege-escalation vulnerability in this device; ex...

CVE-2025-45784

CVE-2025-45784 affects the D-Link DPH-400S/SE VoIP Phone (v1.01). The issue is due to hardcoded provisioning variables in the firmware binary (notably PROVIS_USER_PASSWORD), resulting from insecure storage of sensitive information. An attacker who can access the firmware image could extract crede...