CVE-2020-5759CWE-78

CVE-2020-5759: vulnerability in Grandstream UCM6200 Series

Published · Updated

Follow this CVE+ Monitor UCM6200 series

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.2%
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command.
Affected products
n/a · Grandstream UCM6200 Series