What is CVE-2020-5756?

CVE-2020-5756 is a high-severity vulnerability in Grandstream Gwn7000, classified under Active Debug Code. CVSS score: 8.8/10. Published 2020-07-17.

How severe is CVE-2020-5756?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Grandstream Gwn7000

CVE-2020-5756

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.

Published 2020-07-17 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.025 (83.9th percentile), scored 2026-09-28.

Low probability of exploitation in the next 30 days, but still tracked. 84th percentile — 83.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.025 · newest: 0.025 · change: 0.000

Affected products

Grandstream Gwn7000
Grandstream Gwn7000 Firmware
Tenable Grandstream Gwn7000 — versions Versions 1.0.9.4 and below

Weakness classification (CWE)

References

www.tenable.com/security/research/tra-2020-41 (Not Applicable)
www.tenable.com/cve/CVE-2020-5756 (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2020-5756?: CVE-2020-5756 is a high-severity vulnerability in Grandstream Gwn7000, classified under Active Debug Code. CVSS score: 8.8/10. Published 2020-07-17.
How severe is CVE-2020-5756?: High severity. CVSS v3 base score is 8.8 out of 10.