VULNERABILITY INTELLIGENCE

CVE-2005-2182

CVSS score7.5 HIGH

EPSS probability1.19%

CISA KEVNot currently listed

Published2005-07-11

Last modified2026-06-16

Description

Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the "Messages waiting" message.