CVE-2020-5760

PoC —

CVSS 3.1

7.8 high

EPSS

5%p92

Published

Jul 29, 2020 (Jul 29, 2020)

Modified

Jun 17, 2026

Description

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Vendors: grandstream
Products: ht801 firmware, ht802 firmware, ht812 firmware, ht814 firmware, ht818 firmware, ht813 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news0 stories

No ingested article mentions this CVE yet.