Not rated
CVE-2020-5738 Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when…
Description
Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grandstream GXP1600 Series | Versions not published |