Grandstream GXP1625 安全漏洞

The Grandstream GXP1625 is an enterprise IP phone from Grandstream USA. A security vulnerability exists in the Grandstream GXP1625 version 1.0.7.4, which originates from an incorrect manipulation of the parameter vpnip in the file /cgi-bin/api.values.post in the component Network Status Page, whi...

Grandstream HT800 series OS Command Injection Vulnerability

The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An operating system command injection vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. This vulnerability can be exploited to execute arbitrary commands as root ...

Grandstream Phone Web Interface Detection

Binary data grandstreamwwwdetect.nbin...

Grandstream Phone Web Interface Default Credentials

The remote device appears to be a Grandstream phone which contains a web interface with default credentials enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103514; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2017/09/27 21:37:02 $";...

Grandstream Phone Web UI Information Disclosure

The remote Grandstream phone is affected by an information disclosure vulnerability in the web administration interface due to the failure to restrict access to sensitive configuration data. An unauthenticated, remote attacker can exploit this to disclose sensitive information related to the...