CVE-2018-17563

A Malformed Input String to /cgi-bin/api-getlinestatus on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext...

CVE-2018-17563

The CVE-2018-17563 vulnerability affects Grandstream GXP16xx VoIP phones (example 1.0.4.128). A malformed input string to /cgi-bin/api-get_line_status allows an attacker to dump the device configuration in plaintext, constituting an information disclosure issue. The root cause is a malformed inpu...