CVE-2013-3542

CVE-2013-3542 affects Grandstream GXV series (e.g., GXV3501/3504/3601/3601HD/LL/3611/3615W/P/3651FHD/3662HD/3615WP_HD/3500) with firmware 1.0.4.11. The issue is a hardcoded account "!#/" enabling remote TELNET access, exposing high-severity risk (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H; ba...

PT-2019-6917

Name of the Vulnerable Software and Affected Versions Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP HD, GXV3500 versions 1.0.4.11 Description The issue allows remote attackers to obtain access via a TELNET session due to a hardcode...

CVE-2013-3542: Use of Hard-coded Credentials

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!/" with the same password, which makes it easier for remote attackers to obtain access vi...

Multiple Command Injection Vulnerabilities in Grandstream Products

Multiple Vulnerabilities in Grandstream devices. - The affected devices are: GAC2500, GVC3202, GXP2200, GXV3275, GXV3240, GXV3611IRHD, GXV3611IRHD, GXV3611IRHD, UCM6204, GXV3370, & WP820. - A remote command execution vulnerability exists in the 'priority' and 'logserver' parameters. An...

Blind Command Injection Vulnerability in Grandstream Products

A Blind Command Injection Vulnerability exists in Grandstream devices: - The affected devices are: GWN7000 & GWN7610 - A blind command injection vulnerability exists in the 'filename' parameter. An unauthenticated, remote attacker can exploit this to bypass authentication and obtain a root shell....

Grandstream IP PBX Appliance Version Detection (SIP)

Binary data 700485.prm...

Grandstream IP Multimedia Phone Version GXV3370 Firmware Detection (SIP)

Binary data 700495.prm...

Grandstream GXV3240 < 1.0.3.219 RCE

Binary data 700496.prm...

Grandstream AV Device Detection (SIP)

Binary data 700484.prm...

Grandstream IP Multimedia Phone Version GXV3240 Firmware Detection (SIP)

Binary data 700493.prm...

Grandstream GXV3370 < 1.0.1.41 RCE

Binary data 700498.prm...

Grandstream IP PBX Appliance UCM6204 < 1.0.19.20 RCE

Binary data 700492.prm...

Grandstream GXV3275 < 1.0.3.219 RCE

Binary data 700497.prm...

Grandstream IP Multimedia Phone Version GXV3275 Firmware Detection (SIP)

Binary data 700494.prm...

Grandstream GXV3611IR_HD Trust Management Issues Vulnerability

The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit the default password or hard-coded passwords, hard-coded certificates, etc. to attack the affected components...

Grandstream GWN7610 Command Injection Vulnerability

The Grandstream GWN7610 is a wireless access point device from Grandstream. A security vulnerability exists in the Grandstream GWN7610 version prior to 1.0.8.18. An attacker can exploit this vulnerability to execute illegal commands...

Grandstream GWN7000 Command Injection Vulnerability

The Grandstream GWN7000 is an enterprise-class VPN router from Grandstream. A security vulnerability exists in the Grandstream GWN7000 versions prior to 1.0.6.32. An attacker can exploit this vulnerability to execute illegal commands...

Grandstream GXV3611IR_HD Command Injection Vulnerability

The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit this vulnerability to execute illegal commands...

Grandstream GWN7000 and Grandstream GWN7610 Information Disclosure Vulnerabilities

The Grandstream GWN7610 and Grandstream GWN7000 are both products of Grandstream, a wireless access point device.The Grandstream GWN7000 is an enterprise-class VPN router. An information disclosure vulnerability exists in the Grandstream GWN7000 prior to version 1.0.6.32 and the GWN7610 prior to...

Grandstream UCM6204 SQL Injection Vulnerability

The Grandstream UCM6204 is an IP PBX Private Branch eXchange device from Grandstream. A SQL injection vulnerability exists in the Grandstream UCM6204 prior to version 1.0.19.20, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker...