CVE-2018-17564

CVE-2018-17564

EPSS 1.6%

A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://grandstream.com/support/firmware https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/