CVE-2019-10659

Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a /manager?action=getlogcat priority field...

Grandstream GXV3370 and Grandstream WP820 Command Injection Vulnerabilities

Grandstream GXV3370 and Grandstream WP820 are both products of Grandstream, an IP video phone device.Grandstream GXV3370 is a portable enterprise WiFi phone. A security vulnerability exists in the Grandstream GXV3370 version prior to 1.0.1.41 and the WP820 version prior to 1.0.3.6. An attacker ca...

PT-2019-11972 · Grandstream · Grandstream Wp820 +1

Name of the Vulnerable Software and Affected Versions: Grandstream GXV3370 versions prior to 1.0.1.41 Grandstream WP820 versions prior to 1.0.3.6 Description: The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in a "priority field" of the...