CVE-2025-28170

The Grandstream Networks GXP1628 IP phone (version 1.0.4.130 and earlier ) is vulnerable to Incorrect Access Control (CWE-548). The device is configured with directory listing enabled , which allows unauthorized parties to access sensitive directories and files. To remediate this vulnerability, i...