CVE-2020-5739

🗓️ 14 Apr 2020 13:48:50Reported by tenableType

Grandstream GXP1600 series firmware 1.0.4.152 and below allows authenticated remote command execution via OpenVPN up script

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-5739	21 Oct 202417:18	–	circl
CNVD	Grandstream GXP1600 Code Injection Vulnerability	15 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-5739	14 Apr 202013:48	–	cvelist
EUVD	EUVD-2020-26898	7 Oct 202500:30	–	euvd
NVD	CVE-2020-5739	14 Apr 202014:15	–	nvd
OpenVAS	Grandstream GXP1600 Series IP Phones <= 1.0.4.152 Multiple RCE Vulnerabilities	15 Apr 202000:00	–	openvas
Prion	Design/Logic Flaw	14 Apr 202014:15	–	prion
RedhatCVE	CVE-2020-5739	22 May 202517:42	–	redhatcve

NVD

Node

grandstream gxp1610_firmwareRange≤1.0.4.152

AND

grandstream gxp1610Match-

Node

grandstream gxp1615_firmwareRange≤1.0.4.152

AND

grandstream gxp1615Match-

Node

grandstream gxp1620_firmwareRange≤1.0.4.152

AND

grandstream gxp1620Match-

Node

grandstream gxp1625_firmwareRange≤1.0.4.152

AND

grandstream gxp1625Match-

Node

grandstream gxp1628_firmwareRange≤1.0.4.152

AND

grandstream gxp1628Match-

Node

grandstream gxp1630_firmwareRange≤1.0.4.152

AND

grandstream gxp1630Match-

[
  {
    "product": "Grandstream GXP1600 Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.4.152 and below"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2020-22

21 Nov 2024 05:34Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

CVSS 29

EPSS0.02455

CWE-94