Grandstream Ucm6204 vulnerabilities
9 vulnerabilities
Known vulnerabilities in Grandstream Ucm6204, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2020-5726grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.EPSS4.33%HighCVE-2020-5724grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.EPSS12.16%CriticalCVE-2020-5758grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM's "Old" HTTPS API.EPSS4.38%MediumCVE-2020-5725grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the login action with a crafted username and, through the use of timing attacks, can discover user passwords.EPSS1.75%CriticalCVE-2020-5757grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API.EPSS6.93%CriticalCVE-2020-5759grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command.EPSS3.20%CriticalCVE-2020-5723grandstream · ucm6202_firmware +2 moregrandstream ucm6202_firmwareThe UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.EPSS5.89%HighCVE-2019-10663grandstream · ucm6204_firmwaregrandstream ucm6204_firmwareGrandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI.EPSS27.88%CriticalCVE-2019-10662grandstream · ucm6204_firmwaregrandstream ucm6204_firmwareGrandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? URI.EPSS43.86%