ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-5738

PoC —
CVSS 3.1
8.8 high
EPSS
5%p92
Published
()
Modified
Description

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.

Vendors
grandstream
Products
gxp1610 firmware, gxp1615 firmware, gxp1620 firmware, gxp1625 firmware, gxp1628 firmware, gxp1630 firmware
Weakness
CWE-59
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (5.4%)

In the news

No ingested article mentions this CVE yet.