medium5.3
CVE-2018-17563
A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cl…
Impact
A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Gxp1610 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1615 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1620 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1625 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1628 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1630 Firmware | Version 1.0.4.128 |