Vulnerability Details CVE-2015-2866
SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to establish a TELNET session with a crafted username.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 81.1%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2015-2866
-
cpe:2.3:h:grandstream:gxv3611_hd:*
-
cpe:2.3:o:grandstream:gxv3611_hd_firmware:*