Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
grandstream ucm6202_firmware |
||
grandstream ucm6204_firmware |
||
grandstream ucm6208_firmware |