medium6.5
CVE-2025-28171
An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.
Impact
An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grandstream | Ucm6510 Firmware | through 1.0.20.52 |