grandstream ucm6202 firmware vulnerabilities and exploits

(subscribe to this query)

The Grandstream UCM6200 series prior to 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

1 Metasploit module

The Grandstream UCM6200 series prior to 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

The Grandstream UCM6200 series prior to 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the login action with a crafted username and, through the use of timing attacks, can discover user pass...

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an malicious user to retrieve all passwords and possibly gain elevated privileges.

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

1 Metasploit module

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "N...

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM's "Old" HTTPS API.

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command.

Grandstream Ucm6202 Firmware Grandstream Ucm6204 Firmware Grandstream Ucm6208 Firmware

The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions prior to 1.0.19.20 or inject HTML in password recovery emai...

Grandstream Ucm6200 Firmware

1 EDB exploit1 Metasploit module

The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a d...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook