CVE-2021-37748

CVE-2021-37748에 대한 익스플로잇 전체 글: https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/...

CVE-2021-37748

Multiple buffer overflows in the limited configuration shell /sbin/gsconfig on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a crafted manageif setting, thus bypassing the intended restrictions of this shell and taking full control ...

CVE-2021-37748

CVE-2021-37748 affects Grandstream HT801 analog telephone adapters, with multiple buffer-overflow vulnerabilities in the limited configuration shell (/sbin/gs_config) that allow a remote, authenticated attacker to execute code as root via a crafted manage_if setting, bypassing shell restrictions ...

Exploit for Out-of-bounds Write in Grandstream Ht801_Firmware

Exploits for the CVE-2021...