Unrated severityNVD Advisory· Published Jul 17, 2020· Updated Aug 4, 2024
CVE-2020-5758
CVE-2020-5758
Description
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM's "Old" HTTPS API.
Affected products
1- Range: Versions 1.0.20.23 and below
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.tenable.com/security/research/tra-2020-42mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.