← Database

CVE-2007-1590

HIGH CVSS: 7.8 Published: 2007-03-21 Modified: 2026-06-16

Description

The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain.

Affected Platforms

Grandstream Budgetone 200

Weakness Type

NVD-CWE-Other

References