517 matches found
Blind Command Injection Vulnerability in Grandstream Products
A Blind Command Injection Vulnerability exists in Grandstream devices: - The affected devices are: GWN7000 & GWN7610 - A blind command injection vulnerability exists in the 'filename' parameter. An unauthenticated, remote attacker can exploit this to bypass authentication and obtain a root shell....
Grandstream GXV3275 < 1.0.3.219 RCE
Binary data 700497.prm...
Grandstream IP Multimedia Phone Version GXV3370 Firmware Detection (SIP)
Binary data 700495.prm...
Grandstream IP Multimedia Phone Version GXV3240 Firmware Detection (SIP)
Binary data 700493.prm...
Grandstream IP PBX Appliance Version Detection (SIP)
Binary data 700485.prm...
Grandstream IP PBX Appliance UCM6204 < 1.0.19.20 RCE
Binary data 700492.prm...
Grandstream IP Multimedia Phone Version GXV3275 Firmware Detection (SIP)
Binary data 700494.prm...
Grandstream AV Device Detection (SIP)
Binary data 700484.prm...
Grandstream GXV3240 < 1.0.3.219 RCE
Binary data 700496.prm...
Grandstream GXV3370 < 1.0.1.41 RCE
Binary data 700498.prm...
Grandstream GXP16xx Elevation of Privilege Vulnerability
The Grandstream GXP16xx VoIP is a 16XX series IP phone from Grandstream. An elevation of privilege vulnerability exists in /cgi-bin/deleteCA in Grandstream GXP16xx 1.0.4.128, which can be exploited to delete configuration parameters and gain administrator access to the device via a malformed inpu...
Grandstream GWN7610 Command Injection Vulnerability
The Grandstream GWN7610 is a wireless access point device from Grandstream. A security vulnerability exists in the Grandstream GWN7610 version prior to 1.0.8.18. An attacker can exploit this vulnerability to execute illegal commands...
Grandstream GWN7000 Command Injection Vulnerability
The Grandstream GWN7000 is an enterprise-class VPN router from Grandstream. A security vulnerability exists in the Grandstream GWN7000 versions prior to 1.0.6.32. An attacker can exploit this vulnerability to execute illegal commands...
Grandstream GWN7000 and Grandstream GWN7610 Information Disclosure Vulnerabilities
The Grandstream GWN7610 and Grandstream GWN7000 are both products of Grandstream, a wireless access point device.The Grandstream GWN7000 is an enterprise-class VPN router. An information disclosure vulnerability exists in the Grandstream GWN7000 prior to version 1.0.6.32 and the GWN7610 prior to...
Grandstream GXP16xx Information Disclosure Vulnerability
The Grandstream GXP16xx VoIP is a 16XX series IP phone from Grandstream. An information disclosure vulnerability exists in /cgi-bin/api-getlinestatus in the Grandstream GXP16xx 1.0.4.128, which can be exploited by an attacker to dump the device's configuration in plaintext via a malformed input...
Grandstream GXV3611IR_HD Command Injection Vulnerability
The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit this vulnerability to execute illegal commands...
Grandstream UCM6204 Command Injection Vulnerability
The Grandstream UCM6204 is an IP PBX Private Branch eXchange device from Grandstream. A security vulnerability exists in the Grandstream UCM6204 versions prior to 1.0.19.20. An attacker can exploit the vulnerability to execute illegal commands...
Grandstream GXV3370 and Grandstream WP820 Command Injection Vulnerabilities
Grandstream GXV3370 and Grandstream WP820 are both products of Grandstream, an IP video phone device.Grandstream GXV3370 is a portable enterprise WiFi phone. A security vulnerability exists in the Grandstream GXV3370 version prior to 1.0.1.41 and the WP820 version prior to 1.0.3.6. An attacker ca...
Grandstream UCM6204 SQL Injection Vulnerability
The Grandstream UCM6204 is an IP PBX Private Branch eXchange device from Grandstream. A SQL injection vulnerability exists in the Grandstream UCM6204 prior to version 1.0.19.20, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker...
Grandstream GXP16xx Shell Metacharacter Injection Vulnerability
The Grandstream GXP16xx VoIP is a 16XX series IP phone from Grandstream. A shell metacharacter injection vulnerability exists in the SSH configuration interface of the Grandstream GXP16xx 1.0.4.128, which can be exploited by an attacker to execute arbitrary system commands and obtain a root shell...