VULNERABILITY INTELLIGENCE

CVE-2007-1590

CVSS score7.8 HIGH
EPSS probability3.95%
CISA KEVNot currently listed
Published2007-03-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain.

Primary references