Количество 3
Количество 3
CVE-2020-5722
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.
GHSA-cggp-723h-vg48
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.
BDU:2021-04390
Уязвимость HTTP-интерфейса микропрограммного обеспечения маршрутизаторов Grandstream UCM6200, позволяющая нарушителю выполнить произвольные команды с привилегиями root
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-5722 The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. | CVSS3: 9.8 | 93% Критический | почти 6 лет назад |
| GHSA-cggp-723h-vg48 The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. | CVSS3: 9.8 | 93% Критический | больше 3 лет назад |
 | BDU:2021-04390 Уязвимость HTTP-интерфейса микропрограммного обеспечения маршрутизаторов Grandstream UCM6200, позволяющая нарушителю выполнить произвольные команды с привилегиями root | CVSS3: 9.8 | 93% Критический | почти 6 лет назад |
Уязвимостей на страницу