Lucene search

TenableCVE-2020-5725

HistoryMar 30, 2020 - 8:15 p.m.

CVE-2020-5725

2020-03-3020:15:20

CWE-89

tenable

web.nvd.nist.gov

cve-2020-5725

grandstream

ucm6200 series

sql injection

http server

websockify

remote attacker

unauthenticated

timing attacks

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server’s websockify endpoint. A remote unauthenticated attacker can invoke the login action with a crafted username and, through the use of timing attacks, can discover user passwords.

Affected configurations

Nvd

Node

grandstreamucm6202_firmwareRange<1.0.20.22

AND

grandstreamucm6202Match-

Node

grandstreamucm6204_firmwareRange<1.0.20.22

AND

grandstreamucm6204Match-

Node

grandstreamucm6208_firmwareRange<1.0.20.22

AND

grandstreamucm6208Match-

VendorProductVersionCPE
grandstreamucm6202_firmware*cpe:2.3:o:grandstream:ucm6202_firmware:*:*:*:*:*:*:*:*
grandstreamucm6202-cpe:2.3:h:grandstream:ucm6202:-:*:*:*:*:*:*:*
grandstreamucm6204_firmware*cpe:2.3:o:grandstream:ucm6204_firmware:*:*:*:*:*:*:*:*
grandstreamucm6204-cpe:2.3:h:grandstream:ucm6204:-:*:*:*:*:*:*:*
grandstreamucm6208_firmware*cpe:2.3:o:grandstream:ucm6208_firmware:*:*:*:*:*:*:*:*
grandstreamucm6208-cpe:2.3:h:grandstream:ucm6208:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
grandstream	ucm6202_firmware	*	cpe:2.3:o:grandstream:ucm6202_firmware::::::::
grandstream	ucm6202	-	cpe:2.3:h:grandstream:ucm6202:-:::::::*
grandstream	ucm6204_firmware	*	cpe:2.3:o:grandstream:ucm6204_firmware::::::::
grandstream	ucm6204	-	cpe:2.3:h:grandstream:ucm6204:-:::::::*
grandstream	ucm6208_firmware	*	cpe:2.3:o:grandstream:ucm6208_firmware::::::::
grandstream	ucm6208	-	cpe:2.3:h:grandstream:ucm6208:-:::::::*

CNA Affected

[
  {
    "product": "Grandstream UCM6200 series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.20.20 and below"
      }
    ]
  }
]

References

packetstormsecurity.com/files/156976/Grandstream-UCM6200-Series-WebSocket-1.0.20.20-SQL-Injection.html

www.tenable.com/security/research/tra-2020-17

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Related for CVE-2020-5725