9.3
CVSSv2

CVE-2020-5760

Published: 29/07/2020 Updated: 31/07/2020
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

grandstream ht801_firmware

grandstream ht802_firmware

grandstream ht812_firmware

grandstream ht814_firmware

grandstream ht818_firmware

grandstream ht813_firmware