Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-2560
HistoryFeb 12, 2020 - 2:15 p.m.

Design/Logic Flaw

2020-02-1214:15:00
PRIOn knowledge base
www.prio-n.com
5

7.1 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a “SIP Digest Leak” issue.

CPENameOperatorVersion
phonerlitelt2.15

7.1 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%