Unrated severityNVD Advisory· Published Jul 17, 2020· Updated Aug 4, 2024
CVE-2020-5757
CVE-2020-5757
Description
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API.
Affected products
1- Range: Versions 1.0.20.23 and below
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.tenable.com/security/research/tra-2020-42mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.