CVE-2020-5759

2020-07-1720:35:51

CWE-78

tenable

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

65.6%

JSON

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted “unset” command.

CNA Affected

[
  {
    "product": "Grandstream UCM6200 Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 1.0.20.23 and below"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2020-42