Dph-400se Firmware vulnerabilities

2 known vulnerabilities in Dph-400se Firmware from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Dph-400se Firmware: Use of Hard-coded Credentials

  CVE-2025-45784Jun 18, 2025D-Link

  D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools

• 8.8 High severity

  dph-400se_fru: Improper Privilege Management

  CVE-2023-43960Oct 11, 2023D-LinkEPSS 1.45%

  An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.