high7.8
CVE-2020-5760
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability.
Impact
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Ht801 Firmware | through 1.0.17.5 |
| Grandstream | Ht802 Firmware | through 1.0.17.5 |
| Grandstream | Ht812 Firmware | through 1.0.17.5 |
| Grandstream | Ht814 Firmware | through 1.0.17.5 |
| Grandstream | Ht818 Firmware | through 1.0.17.5 |
| Grandstream | Ht813 Firmware | through 1.0.17.5 |