CVE-2020-5756CWE-489

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API

published July 17, 2020

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02473 · 84.4th percentile
Weakness
CWE-489 · Active Debug Code
Published
2020-07-17T20:16Z
EPSS history
Timeline
  • 17 JUL 20:16Z
    Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API
    cvelistv5