Critical · published March 23, 2020
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.
🔥 A crafted HTTP request can take control of your Grandstream UCM6200 series device with just a few keystrokes! Think of this vulnerability like a sneaky backdoor in a restaurant kitchen—if someone finds it, they can order any meal they want without anyone noticing! 🍽️ An attacker could execute shell commands as root or tamper with password recovery emails, leading to a total compromise of the device. This is absolutely devastating—imagine all your sensitive configurations and communications at the mercy of a malicious actor!
Think of this vulnerability like a sneaky backdoor in a restaurant kitchen—if someone finds it, they can order any meal they want without anyone noticing! 🍽️ This vulnerability arises from an unauthenticated remote SQL injection that allows attackers to send crafted HTTP requests. This can let them run commands with root privileges on versions before 1.0.19.20, or manipulate HTML content in password recovery emails on versions before 1.0.20.17.
An attacker could execute shell commands as root or tamper with password recovery emails, leading to a total compromise of the device. This is absolutely devastating—imagine all your sensitive configurations and communications at the mercy of a malicious actor! Update your Grandstream UCM6200 series to version 1.0.19.20 or later for shell command protection, and 1.0.20.17 or later to secure your email functions. Don't forget to audit your systems for any signs of unauthorized access! You've got this! With these updates, you'll be back in control and your devices will be fortified! 🛡️