CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-10657

Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.2%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

https://github.com/scarvell/grandstream_exploits
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1
https://github.com/scarvell/grandstream_exploits
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1

Products affected by CVE-2019-10657

Grandstream » Gwn7000 » Version: N/A

cpe:2.3:h:grandstream:gwn7000:-
Grandstream » Gwn7610 » Version: N/A

cpe:2.3:h:grandstream:gwn7610:-
Grandstream » Gwn7000 Firmware » Version: N/A

cpe:2.3:o:grandstream:gwn7000_firmware:-
Grandstream » Gwn7610 Firmware » Version: N/A

cpe:2.3:o:grandstream:gwn7610_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10657

Products

Pricing

Contact Us