CVE-2020-5723

🗓️ 30 Mar 2020 19:03:22Reported by tenableType

UCM6200 series 1.0.20.22 stores unencrypted user passwords, allowing potential privilege escalatio

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-5723	15 Feb 202217:41	–	circl
CNVD	Grandstream UCM6200 Elevation of Privilege Vulnerability	31 Mar 202000:00	–	cnvd
Cvelist	CVE-2020-5723	30 Mar 202019:03	–	cvelist
Metasploit	Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump	17 Feb 202217:42	–	metasploit
NVD	CVE-2020-5723	30 Mar 202020:15	–	nvd
Packet Storm	Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump	31 Aug 202400:00	–	packetstorm
Prion	Design/Logic Flaw	30 Mar 202020:15	–	prion
Rapid7 Blog	Metasploit Weekly Wrap-Up	18 Feb 202221:24	–	rapid7blog
RedhatCVE	CVE-2020-5723	22 May 202515:39	–	redhatcve

NVD

Node

grandstream ucm6202_firmwareRange<1.0.20.22

AND

grandstream ucm6202Match-

Node

grandstream ucm6204_firmwareRange<1.0.20.22

AND

grandstream ucm6204Match-

Node

grandstream ucm6208_firmwareRange<1.0.20.22

AND

grandstream ucm6208Match-

[
  {
    "product": "Grandstream UCM6200 series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.20.20 and below"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2020-17

21 Nov 2024 05:34Current

9.5High risk

Vulners AI Score9.5

CVSS 25

CVSS 3.19.8

EPSS0.51792

CWE-312