High severity7.5NVD Advisory· Published Feb 12, 2020· Updated Jun 16, 2026
CVE-2009-5139
CVE-2009-5139
Description
The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Gizmo5/software phonedescription
Patches
Vulnerability mechanics
References
2- voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.htmlnvdExploitThird Party Advisory
- resources.enablesecurity.com/resources/sipdigestleak-tut.pdfnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.