critical9.8
CVE-2018-17564
A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin …
Impact
A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Gxp1610 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1615 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1620 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1625 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1628 Firmware | Version 1.0.4.128 |
| Grandstream | Gxp1630 Firmware | Version 1.0.4.128 |