CVE-2025-45784 Hardcoded credentials in n/a
Attackers can extract hardcoded credentials from the firmware image to gain unauthorized access to device functions or user accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-45784?
CVE-2025-45784 is a critical vulnerability in n/a, published on 18 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially leading to unauthorized access to device functions or user accounts. This vulnerability exists due to insecure storage of sensitive information in the firmware binary.
Weakness: CWE-798
Which versions are affected by CVE-2025-45784?
It affects 2 products.
Products include Dlink Dph-400s Firmware, Dlink Dph-400se Firmware.
How do I fix CVE-2025-45784?
No fix has been published for CVE-2025-45784 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-45784 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-45784 exists.
Sources
Also known as GHSA-jwww-fv33-3qg5.