CVE-2020-5762CWE-476

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service

published July 29, 2020

CVSS
—
EPSS
3%
Percentile
88.7
In the wild
Unconfirmed
What it is

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a NULL pointer dereference in the TR-069 service. This condition is triggered due to mishandling of the HTTP Authentication field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03361 · 88.7th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2020-07-29T18:51Z
EPSS history
Timeline
  • 29 JUL 18:51Z
    Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service
    cvelistv5