CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5760

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.039

EPSS Ranking 87.7%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 9.3

References

Products affected by CVE-2020-5760

Grandstream » Ht801 » Version: N/A

cpe:2.3:h:grandstream:ht801:-
Grandstream » Ht802 » Version: N/A

cpe:2.3:h:grandstream:ht802:-
Grandstream » Ht812 » Version: N/A

cpe:2.3:h:grandstream:ht812:-
Grandstream » Ht813 » Version: N/A

cpe:2.3:h:grandstream:ht813:-
Grandstream » Ht814 » Version: N/A

cpe:2.3:h:grandstream:ht814:-
Grandstream » Ht818 » Version: N/A

cpe:2.3:h:grandstream:ht818:-
Grandstream » Ht801 Firmware » Version: N/A

cpe:2.3:o:grandstream:ht801_firmware:-
Grandstream » Ht801 Firmware » Version: 1.0.17.5

cpe:2.3:o:grandstream:ht801_firmware:1.0.17.5
Grandstream » Ht802 Firmware » Version: N/A

cpe:2.3:o:grandstream:ht802_firmware:-
Grandstream » Ht802 Firmware » Version: 1.0.17.5

cpe:2.3:o:grandstream:ht802_firmware:1.0.17.5
Grandstream » Ht812 Firmware » Version: 1.0.17.5

cpe:2.3:o:grandstream:ht812_firmware:1.0.17.5
Grandstream » Ht813 Firmware » Version: 1.0.17.5

cpe:2.3:o:grandstream:ht813_firmware:1.0.17.5
Grandstream » Ht814 Firmware » Version: 1.0.17.5

cpe:2.3:o:grandstream:ht814_firmware:1.0.17.5
Grandstream » Ht818 Firmware » Version: 1.0.17.5

cpe:2.3:o:grandstream:ht818_firmware:1.0.17.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5760

Products

Pricing

Contact Us