Beveiligingsadvies

CVE-2020-5726

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-30 19:03:52
Laatst bijgewerkt 2024-08-04 08:39:25
Toegewezen door tenable
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.