CVE-2007-1590: Grandstream Budgetone 200

High severity, CVSS 7.8. EPSS: 4% chance of exploitation in the next 30 days.

The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain.

Affected products

• Grandstream Budgetone 200: version 1.1.1.5 only; version 1.1.1.14 only

Published 2007-03-21. Last modified 2026-06-16.