Unrated severityNVD Advisory· Published Feb 12, 2020· Updated Aug 7, 2024
CVE-2009-5140
CVE-2009-5140
Description
The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Linksys/SPA2102 phone adapterdescription
Patches
Vulnerability mechanics
References
2- voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.htmlmitrex_refsource_MISC
- resources.enablesecurity.com/resources/sipdigestleak-tut.pdfmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.