Grandstream Ht802
7 CVEs affecting Grandstream Ht802. Latest disclosed: 2020-07-29. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5763 | High | 8.8 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by… |
CVE-2017-16565 | High | 8.8 | 2017-11-06 | Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using th… |
CVE-2017-16563 | High | 8.0 | 2017-11-06 | Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to modify settings, related to cgi-bin/up… |
CVE-2020-5760 | High | 7.8 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execu… |
CVE-2020-5762 | High | 7.5 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote… |
CVE-2020-5761 | High | 7.5 | 2020-07-29 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated rem… |
CVE-2017-16564 | Medium | 5.4 | 2017-11-06 | Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users to inject arbitrary… |