A critical vulnerability in Grandstream GXP1600 series VoIP phones allows a remote, unauthenticated attacker to gain root privileges and silently eavesdrop on communications. [...]
Flaw in Grandstream VoIP phones allows stealthy eavesdropping
Summary + source link. No paywalls, no tracking.