CVE-2020-5760
29.07.2020, 19:15
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.
| Vendor | Product | Version |
|---|---|---|
| grandstream | ht801_firmware | 𝑥 ≤ 1.0.17.5 |
| grandstream | ht802_firmware | 𝑥 ≤ 1.0.17.5 |
| grandstream | ht812_firmware | 𝑥 ≤ 1.0.17.5 |
| grandstream | ht814_firmware | 𝑥 ≤ 1.0.17.5 |
| grandstream | ht818_firmware | 𝑥 ≤ 1.0.17.5 |
| grandstream | ht813_firmware | 𝑥 ≤ 1.0.17.5 |
𝑥
= Vulnerable software versions