Vulnerability Details CVE-2020-5761
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by sending a one character TCP message to the TR-069 service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 83.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
References
Products affected by CVE-2020-5761
-
cpe:2.3:h:grandstream:ht801:-
-
cpe:2.3:h:grandstream:ht802:-
-
cpe:2.3:h:grandstream:ht812:-
-
cpe:2.3:h:grandstream:ht813:-
-
cpe:2.3:h:grandstream:ht814:-
-
cpe:2.3:h:grandstream:ht818:-
-
cpe:2.3:o:grandstream:ht801_firmware:-
-
cpe:2.3:o:grandstream:ht801_firmware:1.0.17.5
-
cpe:2.3:o:grandstream:ht802_firmware:-
-
cpe:2.3:o:grandstream:ht802_firmware:1.0.17.5
-
cpe:2.3:o:grandstream:ht812_firmware:1.0.17.5
-
cpe:2.3:o:grandstream:ht813_firmware:1.0.17.5
-
cpe:2.3:o:grandstream:ht814_firmware:1.0.17.5
-
cpe:2.3:o:grandstream:ht818_firmware:1.0.17.5