Command injection

2021-03-2917:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.

CPENameOperatorVersion
grp2612_firmwareeq1.0.3.6
grp2612p_firmwareeq1.0.3.6
grp2612w_firmwareeq1.0.3.6
grp2613_firmwareeq1.0.3.6
grp2614_firmwareeq1.0.3.6
grp2615_firmwareeq1.0.3.6
grp2616_firmwareeq1.0.3.6

Name	Operator	Version
grp2612_firmware	eq	1.0.3.6
grp2612p_firmware	eq	1.0.3.6
grp2612w_firmware	eq	1.0.3.6
grp2613_firmware	eq	1.0.3.6
grp2614_firmware	eq	1.0.3.6
grp2615_firmware	eq	1.0.3.6
grp2616_firmware	eq	1.0.3.6