gxv3175-remote-code-exec

Remote code execution for Grandstream GXV3175 VOIP phone. === INSTALLATION === copy the files to the same directory structure under the metasploit top level dir === USE === in msfconsole use exploits/linux/http/grandstreamgxv3175cmdexec set RHOST 192.168.0.1 set USERNAME & PASSWORD if required...

Grandstream GXV3175 Unauthenticated Command Execution Exploit

This Metasploit module exploits a command injection vulnerability in Grandstream GXV3175 IP multimedia phones. The settimezone action does not validate input in the timezone parameter allowing injection of arbitrary commands. A buffer overflow in the phonecookie cookie parsing allows authenticati...

Grandstream GXV3175 'settimezone' Unauthenticated Command Execution

This module exploits a command injection vulnerability in Grandstream GXV3175 IP multimedia phones. The 'settimezone' action does not validate input in the 'timezone' parameter allowing injection of arbitrary commands. A buffer overflow in the 'phonecookie' cookie parsing allows authentication to...