Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dph-400se:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDph 400Se (1a727719-aa5a-5066-b0d5-a77d4b51cd1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45784 not_vulnerable 2026-06-08 07:25:11.093052 Details available
D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially leading to unauthorized access to device functions or user accounts. This vulnerability exists due to insecure storage of sensitive information in the firmware binary.
Published: 2025-06-18T00:00:00.000Z
Updated: 2025-06-18T14:25:38.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43960 not_vulnerable 2026-06-08 06:12:38.191822 Details available
An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.
Published: 2023-10-11T00:00:00.000Z
Updated: 2024-09-18T16:13:12.135Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.