CVE-2025-45784

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-06-18 · updated 2026-06-17
Weakness: CWE-798

Description

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially leading to unauthorized access to device functions or user accounts. This vulnerability exists due to insecure storage of sensitive information in the firmware binary.

Affected products

Dlink Dph-400S Firmware: 1.01
Dlink Dph-400Se Firmware: 1.01

References

https://cybermaya.in/posts/Post-37/
https://www.dlink.com/en/security-bulletin/

Get alerted when CVE-2025-45784 or the next vulnerability affects your stack