CVE-2020-5761CWE-835

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service

published July 29, 2020

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by sending a one character TCP message to the TR-069 service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04093 · 90.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2020-07-29T18:51Z
EPSS history
Timeline
  • 29 JUL 18:51Z
    Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service
    cvelistv5