← Database

CVE-2005-2182

HIGH CVSS: 7.5 Published: 2005-07-11 Modified: 2026-06-16

Description

Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message.

Affected Platforms

Grandstream Bt-100 FirmwareGrandstream Bt-100

Weakness Type

CWE-347

References