CVE-2007-1590: grandstream budgetone_200
Vulnerability summary
CVE-2007-1590 is a high (CVSS 7.8) vulnerability in grandstream budgetone_200. EPSS estimates a 4.08% chance of exploitation in the next 30 days, higher than 90.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 21-03-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.08%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
+0.13 pp
From 3.95% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundGrandstream Budge Tone-200 IP Phone - Digest domain Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Grandstream1 product
- budgetone_2001.1.1.5 | 1.1.1.14
1 vendor · 1 product
References
7 links- lists.grok.org.uk/pipermail/full-disclosure/2007-March/053099.htmlMailing ListX Refsource FULLDISCVendor Advisory