\n<\/p>\n
A important vulnerability affecting Grandstream\u2019s GXP1600 collection telephones might permit risk actors to intercept calls, Rapid7 reported this week.<\/strong><\/p>\n The vulnerability, tracked as CVE-2026-2329, has been described as a stack-based buffer overflow that may be exploited by an unauthenticated attacker to remotely execute code with root privileges on the focused machine.<\/p>\n The GXP1600 is a line of primary VoIP desktop telephones primarily utilized by small-to-medium companies.\u00a0<\/p>\n An attacker might exploit the vulnerability to extract secrets and techniques from susceptible telephones, together with native and SIP account credentials, enabling name interception and eavesdropping.<\/p>\n \u201cWith root entry, the attacker can reconfigure the machine\u2019s SIP settings to level to infrastructure they management. A malicious SIP proxy. Calls nonetheless dial. The show nonetheless lights up. The person nonetheless hears a dial tone. However now, each name flows via another person\u2019s palms first,\u201d defined<\/a> Douglas McKee, director of vulnerability intelligence at Rapid7.<\/p>\n \u201cThere\u2019s no dramatic \u2018wiretap put in\u2019 second. No van parked exterior with antennas on the roof. Simply silent, clear interception. Conversations about contracts, negotiations, authorized technique, possibly even delicate private issues \u2014 all are relayed in actual time,\u201d McKee added.<\/p>\n