A critical vulnerability affecting Grandstream’s GXP1600 series phones could allow threat actors to intercept calls.