high7.2
CVE-2020-25217
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.
Impact
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Grp2612 Firmware | Version 1.0.3.6 |
| Grandstream | Grp2612p Firmware | Version 1.0.3.6 |
| Grandstream | Grp2612w Firmware | Version 1.0.3.6 |
| Grandstream | Grp2613 Firmware | Version 1.0.3.6 |
| Grandstream | Grp2614 Firmware | Version 1.0.3.6 |
| Grandstream | Grp2615 Firmware | Version 1.0.3.6 |
| Grandstream | Grp2616 Firmware | Version 1.0.3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cwe.mitre.org/data/definitions/77.html
- https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0001/FEYE-2021-0001.md
- https://cwe.mitre.org/data/definitions/77.html
- https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0001/FEYE-2021-0001.md