Grandstream Ucm6204 Firmware
9 CVEs affecting Grandstream Ucm6204 Firmware. Latest disclosed: 2020-07-17. Critical: 3, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5759 | Critical | 9.8 | 2020-07-17 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute com… |
CVE-2020-5757 | Critical | 9.8 | 2020-07-17 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass com… |
CVE-2020-5723 | Critical | 9.8 | 2020-03-30 | The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and poss… |
CVE-2020-5758 | High | 8.8 | 2020-07-17 | Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute co… |
CVE-2019-10663 | High | 8.8 | 2019-03-30 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup AP… |
CVE-2019-10662 | High | 8.8 | 2019-03-30 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-ba… |
CVE-2020-5726 | High | 7.5 | 2020-03-30 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke… |
CVE-2020-5724 | High | 7.5 | 2020-03-30 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker… |
CVE-2020-5725 | Medium | 5.9 | 2020-03-30 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker… |