cbcvebase.

Grandstream Ucm6200 Firmware vulnerabilities

1 known vulnerability affecting grandstream/ucm6200_firmware.

Total CVEs
1
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-5722P1CRITICALCVSS 9.8KEVPoCfixed in 1.0.19.202020-03-23
CVE-2020-5722 [CRITICAL] CWE-89 CVE-2020-5722: The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.
nvd
Grandstream Ucm6200 Firmware vulnerabilities | cvebase