Security Advisory
CVE-2020-5760
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.