high7.6
CVE-2025-28170
Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control.
Impact
Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Gxp1628 Firmware | through 1.0.4.130 |