Security Advisory

CVE-2020-5760

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-29 18:51:40
Last updated 2024-08-04 08:39:25
Assigner tenable
State PUBLISHED

Description

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.