513 matches found
PT-2021-11114 · Grandstream · Grandstream Grp261X Voip Phone
Name of the Vulnerable Software and Affected Versions: Grandstream GRP261x VoIP phone version 1.0.3.6 Base Description: The issue allows Command Injection as root in the administrative web interface of the Grandstream GRP261x VoIP phone. Recommendations: For Grandstream GRP261x VoIP phone version...
Grandstream Multiple Products Authentication Bypass (CVE-2019-10655)
An authentication bypass vulnerability exists in multiple Grandstream products. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...
Grandstream Multiple Products Remote Code Execution (CVE-2019-10659)
A remote code execution vulnerability exists in multiple Grandstream products. Successful exploitation of this vulnerability could allow a remote authenticated attacker to execute arbitrary code on the affected system...
Grandstream GXP1600 Remote Code Execution (CVE-2020-5738)
A remote code execution vulnerability exists in Grandstream GXP1600. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
VulnCheck KEV: CVE-2019-10655
Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow via...
Grandstream UCM6202 Command Injection (CVE-2020-5722)
A command injection vulnerability exists in Grandstream UCM6202. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Cloud-y, with a chance of hacking all the wireless things
Grandstream are a provider of IP video and voice services, as well as Wi-Fi and other related services and equipment. Their products are sold in over 150 countries and they have offices around the globe. We were having a look at their GWN.Cloud management platform, used for remote device and...
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
UPDATE Multiple high-severity vulnerabilities in the Grandstream HT800 series of Analog Telephone Adaptors ATAs threaten home office and midrange users alike, with outages, eavesdropping and device takeover. The HT800 series of ATAs is designed for everyone from home or small-office users to...
Grandstream HT800 series OS Command Injection Vulnerability
The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An operating system command injection vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. This vulnerability can be exploited to execute arbitrary commands as root ...
Unspecified vulnerability in the Grandstream HT800 series
The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An input validation error vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. The vulnerability stems from a failure of the system to properly validate incoming dat...
Grandstream HT800 series code issue vulnerability
The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. A code issue vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. An attacker could exploit this vulnerability to cause a denial of service...
Grandstream HT800 series Encryption Problem Vulnerability
The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. The Grandstream HT800 series is vulnerable to an encryption issue that originates from a backdoor in the SSH service. The vulnerability can be exploited by an attacker to obtain a root shell by correctly...
CVE-2020-5763
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt...
CVE-2020-5762
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a NULL pointer dereference in the TR-069 service. This condition is triggered due to mishandling of t...
CVE-2020-5763
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt...
CVE-2020-5761
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by sending a one character TCP message to the TR-069 service...
CVE-2020-5761
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by sending a one character TCP message to the TR-069 service...
CVE-2020-5762
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a NULL pointer dereference in the TR-069 service. This condition is triggered due to mishandling of t...
CVE-2020-5760
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message...
CVE-2020-5760
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message...