Critical severity9.8NVD Advisory· Published Apr 1, 2019· Updated Jun 17, 2026

CVE-2018-17565

Description

Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root shell.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Grandstream/Gxp1610 Firmware
cpe:2.3:o:grandstream:gxp1610_firmware:1.0.4.128:*:*:*:*:*:*:*
Grandstream/Gxp1615 Firmware
cpe:2.3:o:grandstream:gxp1615_firmware:1.0.4.128:*:*:*:*:*:*:*
Grandstream/Gxp1620 Firmware
cpe:2.3:o:grandstream:gxp1620_firmware:1.0.4.128:*:*:*:*:*:*:*
Grandstream/Gxp1625 Firmware
cpe:2.3:o:grandstream:gxp1625_firmware:1.0.4.128:*:*:*:*:*:*:*
Grandstream/Gxp1628 Firmware
cpe:2.3:o:grandstream:gxp1628_firmware:1.0.4.128:*:*:*:*:*:*:*
Grandstream/Gxp1630 Firmware
cpe:2.3:o:grandstream:gxp1630_firmware:1.0.4.128:*:*:*:*:*:*:*
Grandstream/GXP16xx VoIP phonesllm-create
Range: 1.0.4.128

Patches

Vulnerability mechanics

References

grandstream.com/support/firmwarenvdVendor Advisory
iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000