Skip to content
Not rated

CVE-2020-5738 Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when…

Description

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.

Affected products and versions

Product Affected versions Fixed in
Grandstream GXP1600 Series Versions not published
The 2 CVEs of Grandstream GXP1600 Series →
Track this CVE