CVE-2020-5763CWE-489

Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service

published July 29, 2020

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02726 · 86.0th percentile
Weakness
CWE-489 · Active Debug Code
Published
2020-07-29T18:51Z
EPSS history
Timeline
  • 29 JUL 18:51Z
    Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service
    cvelistv5