QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-5758

Back to search

CVE-2020-5758

Published: Jul 17, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a crafted HTTP GET to the UCM's "Old" HTTPS API.

VendorProductVersions

n/a

Grandstream UCM6200 Series

affected
Versions 1.0.20.23 and below

Weaknesses (CWE)

CWE-78

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now