high8.8
CVE-2020-5738
Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted ta…
Impact
Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Gxp1610 Firmware | through 1.0.4.152 |
| Grandstream | Gxp1615 Firmware | through 1.0.4.152 |
| Grandstream | Gxp1620 Firmware | through 1.0.4.152 |
| Grandstream | Gxp1625 Firmware | through 1.0.4.152 |
| Grandstream | Gxp1628 Firmware | through 1.0.4.152 |
| Grandstream | Gxp1630 Firmware | through 1.0.4.152 |