High severity8.8NVD Advisory· Published Mar 30, 2019· Updated Jun 17, 2026

CVE-2019-10659

Description

Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a /manager?action=getlogcat priority field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Grandstream/Gxv3370 Firmware
cpe:2.3:o:grandstream:gxv3370_firmware:*:*:*:*:*:*:*:*
Range: <1.0.1.41
Grandstream/Wp820 Firmware
cpe:2.3:o:grandstream:wp820_firmware:*:*:*:*:*:*:*:*
Range: <1.0.3.6
Grandstream/GXV3370llm-fuzzy
Range: <1.0.1.41
Grandstream/WP820llm-fuzzy
Range: <1.0.3.6

Patches

Vulnerability mechanics

References

www.trustwave.com/en-us/resources/security-resources/security-advisories/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000