EUVD-2019-2460

Malware in sbrugna...

CVE-2019-10660

Grandstream GXV3611IRHD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field...

CVE-2019-10661

On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...

Grandstream GXV3611IR_HD Command Injection Vulnerability

The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit this vulnerability to execute illegal commands...

Grandstream GXV3611IR_HD Trust Management Issues Vulnerability

The Grandstream GXV3611IRHD is a webcam from Grandstream. A security vulnerability exists in Grandstream GXV3611IRHD versions prior to 1.0.3.23. An attacker can exploit the default password or hard-coded passwords, hard-coded certificates, etc. to attack the affected components...

CVE-2019-10661

On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...

CVE-2019-10660

Grandstream GXV3611IRHD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field...

Default credentials

On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...

CVE-2019-10661

On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...

CVE-2019-10661

CVE-2019-10661 affects Grandstream GXV3611IR_HD prior to version 1.0.3.23, where the root account has no password, enabling potential unauthorized access. Red Hat, CVE registries, and Nessus-related entries corroborate the vulerability: default/root password issue on affected GXV3611IR_HD devices...

CVE-2019-10660

Grandstream GXV3611IRHD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field...

CVE-2019-10660

The CVE-2019-10660 affects Grandstream GXV3611IR_HD devices, documented as vulnerable before firmware 1.0.3.23. A remote attacker with authentication can execute arbitrary code by supplying shell metacharacters in the logserver field of the /goform/systemlog API. The issue is a remote code execut...