D-Link Dph-400se Firmware vulnerabilities

2 CVEs affecting D-Link Dph-400se Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-45784, published 2025-06-18.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-43960, published 2023-10-11. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.
• CVE-2025-45784, published 2025-06-18. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware…