CVE-2020-5760CWE-78

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability

published July 29, 2020

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05470 · 92.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2020-07-29T18:51Z
EPSS history
Timeline
  • 29 JUL 18:51Z
    Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability
    cvelistv5