CVE-2020-5760

The CVE-2020-5760 entry applies to Grandstream HT800 series firmware

CVE-2020-5761

The CVE-2020-5761 issue affects Grandstream HT800 series firmware 1.0.17.5 and earlier. A bug in the TR-069 service can enter an infinite loop, causing CPU exhaustion when an unauthenticated remote attacker sends a single-character TCP message to TR-069. Public descriptions confirm the impact is ...

CVE-2020-5763

The CVE-2020-5763 entry describes a backdoor in the SSH service of Grandstream HT800 series firmware (≤ 1.0.17.5). An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt, enabling complete device compromise. The connected documents confirm the affected ...

CVE-2020-5762

CVE-2020-5762 affects Grandstream HT800 series firmware

CVE-2017-16563

The CVE-2017-16563 entry documents a CSRF flaw in the Basic Settings page of Vonage (Grandstream) HT802 home gateway devices. The vulnerability allows an attacker to modify device settings via the cgi-bin/update endpoint without proper authorization, as described in the description. Connected sou...

CVE-2017-16565

CVE-2017-16565 describes a CSRF vulnerability in the Vonage (Grandstream) HT802 home gateway. An attacker can abuse CSRF on the /cgi-bin/login page to authenticate a user by using the device’s default password (123) and submit arbitrary requests. Public sources corroborate that this affects HT802...

CVE-2017-16564

Affected : Vonage (Grandstream) HT802 home gateway devices. Vulnerability : Stored Cross-Site Scripting (XSS) in /cgi-bin/config2, exploitable via the DHCP vendor class ID field (P148). Impact : remote authenticated users can inject arbitrary web script/HTML (per CVE-2017-16564). Root cause : XSS...