CVE-2020-5739: Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to…

PriorityP356high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

5.34%

91.6th percentile

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface. When the VPN's connection is established, the user defined script is executed with root privileges.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
grandstream	gxp1610_firmware	<= 1.0.4.152	—
grandstream	gxp1615_firmware	<= 1.0.4.152	—
grandstream	gxp1620_firmware	<= 1.0.4.152	—
grandstream	gxp1625_firmware	<= 1.0.4.152	—
grandstream	gxp1628_firmware	<= 1.0.4.152	—
grandstream	gxp1630_firmware	<= 1.0.4.152	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.