520 matches found
CVE-2013-3542
CVE-2013-3542 affects Grandstream GXV series (e.g., GXV3501/3504/3601/3601HD/LL/3611/3615W/P/3651FHD/3662HD/3615WP_HD/3500) with firmware 1.0.4.11. The issue is a hardcoded account "!#/" enabling remote TELNET access, exposing high-severity risk (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H; ba...
CVE-2013-3542
Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!/" with the same password, which makes it easier for remote attackers to obtain access vi...
Multiple Command Injection Vulnerabilities in Grandstream Products
Multiple Vulnerabilities in Grandstream devices. - The affected devices are: GAC2500, GVC3202, GXP2200, GXV3275, GXV3240, GXV3611IRHD, GXV3611IRHD, GXV3611IRHD, UCM6204, GXV3370, & WP820. - A remote command execution vulnerability exists in the 'priority' and 'logserver' parameters. An...
Blind Command Injection Vulnerability in Grandstream Products
A Blind Command Injection Vulnerability exists in Grandstream devices: - The affected devices are: GWN7000 & GWN7610 - A blind command injection vulnerability exists in the 'filename' parameter. An unauthenticated, remote attacker can exploit this to bypass authentication and obtain a root shell....
Grandstream GXV3275 < 1.0.3.219 RCE
Binary data 700497.prm...
Grandstream IP Multimedia Phone Version GXV3370 Firmware Detection (SIP)
Binary data 700495.prm...
Grandstream IP Multimedia Phone Version GXV3240 Firmware Detection (SIP)
Binary data 700493.prm...
Grandstream GXV3240 < 1.0.3.219 RCE
Binary data 700496.prm...
Grandstream AV Device Detection (SIP)
Binary data 700484.prm...
Grandstream IP Multimedia Phone Version GXV3275 Firmware Detection (SIP)
Binary data 700494.prm...
Grandstream IP PBX Appliance Version Detection (SIP)
Binary data 700485.prm...
Grandstream IP PBX Appliance UCM6204 < 1.0.19.20 RCE
Binary data 700492.prm...
Grandstream GXV3370 < 1.0.1.41 RCE
Binary data 700498.prm...
Grandstream GWN7000 and Grandstream GWN7610 Information Disclosure Vulnerabilities
The Grandstream GWN7610 and Grandstream GWN7000 are both products of Grandstream, a wireless access point device.The Grandstream GWN7000 is an enterprise-class VPN router. An information disclosure vulnerability exists in the Grandstream GWN7000 prior to version 1.0.6.32 and the GWN7610 prior to...
Grandstream GWN7610 Command Injection Vulnerability
The Grandstream GWN7610 is a wireless access point device from Grandstream. A security vulnerability exists in the Grandstream GWN7610 version prior to 1.0.8.18. An attacker can exploit this vulnerability to execute illegal commands...
Grandstream GWN7000 Command Injection Vulnerability
The Grandstream GWN7000 is an enterprise-class VPN router from Grandstream. A security vulnerability exists in the Grandstream GWN7000 versions prior to 1.0.6.32. An attacker can exploit this vulnerability to execute illegal commands...
Grandstream GXP16xx Elevation of Privilege Vulnerability
The Grandstream GXP16xx VoIP is a 16XX series IP phone from Grandstream. An elevation of privilege vulnerability exists in /cgi-bin/deleteCA in Grandstream GXP16xx 1.0.4.128, which can be exploited to delete configuration parameters and gain administrator access to the device via a malformed inpu...
Grandstream GXP16xx Information Disclosure Vulnerability
The Grandstream GXP16xx VoIP is a 16XX series IP phone from Grandstream. An information disclosure vulnerability exists in /cgi-bin/api-getlinestatus in the Grandstream GXP16xx 1.0.4.128, which can be exploited by an attacker to dump the device's configuration in plaintext via a malformed input...
Grandstream UCM6204 Command Injection Vulnerability
The Grandstream UCM6204 is an IP PBX Private Branch eXchange device from Grandstream. A security vulnerability exists in the Grandstream UCM6204 versions prior to 1.0.19.20. An attacker can exploit the vulnerability to execute illegal commands...
Grandstream GXV3611IR_HD Command Injection Vulnerability
The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit this vulnerability to execute illegal commands...