Lucene search

[email protected]CVE-2020-5739

HistoryApr 14, 2020 - 2:15 p.m.

CVE-2020-5739

2020-04-1414:15:12

CWE-94

[email protected]

web.nvd.nist.gov

grandstream

gxp1600

firmware

vulnerability

remote execution

openvpn

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone’s VPN settings via the “Additional Settings” field in the web interface. When the VPN’s connection is established, the user defined script is executed with root privileges.

Affected configurations

NVD

Node

grandstreamgxp1610_firmwareRange≤1.0.4.152

AND

grandstreamgxp1610Match-

Node

grandstreamgxp1615_firmwareRange≤1.0.4.152

AND

grandstreamgxp1615Match-

Node

grandstreamgxp1620_firmwareRange≤1.0.4.152

AND

grandstreamgxp1620Match-

Node

grandstreamgxp1625_firmwareRange≤1.0.4.152

AND

grandstreamgxp1625Match-

Node

grandstreamgxp1628_firmwareRange≤1.0.4.152

AND

grandstreamgxp1628Match-

Node

grandstreamgxp1630_firmwareRange≤1.0.4.152

AND

grandstreamgxp1630Match-

CPENameOperatorVersion
grandstream:gxp1610_firmwaregrandstream gxp1610 firmwarele1.0.4.152

CPE	Name	Operator	Version
grandstream:gxp1610_firmware	grandstream gxp1610 firmware	le	1.0.4.152

CNA Affected

[
  {
    "product": "Grandstream GXP1600 Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.4.152 and below"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2020-22

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Related for CVE-2020-5739

nvd1 cvelist1 prion1 openvas1