ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-5761

PoC —
CVSS 3.1
7.5 high
EPSS
4%p90
Published
()
Modified
Description

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by sending a one character TCP message to the TR-069 service.

Vendors
grandstream
Products
ht801 firmware, ht802 firmware, ht812 firmware, ht814 firmware, ht818 firmware, ht813 firmware
Weakness
CWE-835
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news

No ingested article mentions this CVE yet.