Security Advisory
CVE-2020-25217
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.