CVE-2025-28170

Publication date

2025-07-29 00:00:00

Family

mitre

State

PUBLISHED

Description

Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.