CVEDB API

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2020-25218

Grandstream » Grp2612 » Version: N/A

cpe:2.3:h:grandstream:grp2612:-
Grandstream » Grp2612p » Version: N/A

cpe:2.3:h:grandstream:grp2612p:-
Grandstream » Grp2612w » Version: N/A

cpe:2.3:h:grandstream:grp2612w:-
Grandstream » Grp2613 » Version: N/A

cpe:2.3:h:grandstream:grp2613:-
Grandstream » Grp2614 » Version: N/A

cpe:2.3:h:grandstream:grp2614:-
Grandstream » Grp2615 » Version: N/A

cpe:2.3:h:grandstream:grp2615:-
Grandstream » Grp2616 » Version: N/A

cpe:2.3:h:grandstream:grp2616:-
Grandstream » Grp2612 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2612_firmware:1.0.3.6
Grandstream » Grp2612p Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2612p_firmware:1.0.3.6
Grandstream » Grp2612w Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2612w_firmware:1.0.3.6
Grandstream » Grp2613 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2613_firmware:1.0.3.6
Grandstream » Grp2614 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2614_firmware:1.0.3.6
Grandstream » Grp2615 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2615_firmware:1.0.3.6
Grandstream » Grp2616 Firmware » Version: 1.0.3.6

cpe:2.3:o:grandstream:grp2616_firmware:1.0.3.6