CVEDB API

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 78.6%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 9.0

References

Products affected by CVE-2020-25217

Grandstream » Grp2612 » Version: N/A

cpe:2.3:h:grandstream:grp2612:-
Grandstream » Grp2612p » Version: N/A

cpe:2.3:h:grandstream:grp2612p:-
Grandstream » Grp2612w » Version: N/A

cpe:2.3:h:grandstream:grp2612w:-
Grandstream » Grp2613 » Version: N/A

cpe:2.3:h:grandstream:grp2613:-
Grandstream » Grp2614 » Version: N/A

cpe:2.3:h:grandstream:grp2614:-
Grandstream » Grp2615 » Version: N/A

cpe:2.3:h:grandstream:grp2615:-
Grandstream » Grp2616 » Version: N/A

cpe:2.3:h:grandstream:grp2616:-
Grandstream » Grp2612 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2612_firmware:1.0.3.6
Grandstream » Grp2612p Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2612p_firmware:1.0.3.6
Grandstream » Grp2612w Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2612w_firmware:1.0.3.6
Grandstream » Grp2613 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2613_firmware:1.0.3.6
Grandstream » Grp2614 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2614_firmware:1.0.3.6
Grandstream » Grp2615 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2615_firmware:1.0.3.6
Grandstream » Grp2616 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2616_firmware:1.0.3.6