High severity8.8NVD Advisory· Published Feb 12, 2020· Updated Jun 16, 2026
CVE-2009-5140
CVE-2009-5140
Description
The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:linksys:spa2102_firmware:-:*:*:*:*:*:*:*
- Linksys/SPA2102 phone adapterdescription
Patches
Vulnerability mechanics
References
2- voipsa.org/pipermail/voipsec_voipsa.org/2009-April/002946.htmlnvdMailing ListThird Party Advisory
- resources.enablesecurity.com/resources/sipdigestleak-tut.pdfnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.