CVE-2019-10657

—

CVSS 3.1

6.5 medium

EPSS

1%p72

Published

Mar 30, 2019 (Mar 30, 2019)

Modified

Jun 17, 2026

Description

Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request.

Vendors: grandstream
Products: gwn7610 firmware, gwn7000 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.