CVE-2020-5739

EUVD-2020-26898
Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface. When the VPN's connection is established, the user defined script is executed with root privileges.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Affected Products (NVD)
VendorProductVersion
grandstreamgxp1610_firmware
𝑥
≤ 1.0.4.152
grandstreamgxp1615_firmware
𝑥
≤ 1.0.4.152
grandstreamgxp1620_firmware
𝑥
≤ 1.0.4.152
grandstreamgxp1625_firmware
𝑥
≤ 1.0.4.152
grandstreamgxp1628_firmware
𝑥
≤ 1.0.4.152
grandstreamgxp1630_firmware
𝑥
≤ 1.0.4.152
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.tenable.com/security/research/tra-2020-22
https://www.tenable.com/security/research/tra-2020-22