CVE-2021-37748: grandstream ht801_firmware Out-of-bounds Write
Vulnerability summary
CVE-2021-37748 is a high (CVSS 9.0) Out-of-bounds Write vulnerability in grandstream ht801_firmware. EPSS estimates a 7.41% chance of exploitation in the next 30 days, higher than 94.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 28-10-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a crafted manage_if setting, thus bypassing the intended restrictions of this shell and taking full control of the device. There are default weak credentials that can be used to authenticate.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
7.41%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.41% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (secforce.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Grandstream1 product
- ht801_firmware< 1.0.29
1 vendor · 1 product
References
3 links- www.grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/product/ht801X Refsource MISCProductVendor Advisory
- www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/X Refsource MISCExploitThird Party Advisory