CVE-2020-25217
Severity Score
7.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.
El teléfono VoIP Grandstream GRP261x que ejecuta la versión de firmware 1.0.3.6 (Base), permite una Inyección de Comando como root en su interfaz web administrativa
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-09-09 CVE Reserved
- 2021-03-29 CVE Published
- 2023-12-13 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://cwe.mitre.org/data/definitions/77.html | Third Party Advisory | |
| https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0001/FEYE-2021-0001.md | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Grandstream Search vendor "Grandstream" | Grp2612 Firmware Search vendor "Grandstream" for product "Grp2612 Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2612 Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2612 Search vendor "Grandstream" for product "Grp2612" | - | - |
Safe
|
| Grandstream Search vendor "Grandstream" | Grp2612p Firmware Search vendor "Grandstream" for product "Grp2612p Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2612p Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2612p Search vendor "Grandstream" for product "Grp2612p" | - | - |
Safe
|
| Grandstream Search vendor "Grandstream" | Grp2612w Firmware Search vendor "Grandstream" for product "Grp2612w Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2612w Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2612w Search vendor "Grandstream" for product "Grp2612w" | - | - |
Safe
|
| Grandstream Search vendor "Grandstream" | Grp2613 Firmware Search vendor "Grandstream" for product "Grp2613 Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2613 Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2613 Search vendor "Grandstream" for product "Grp2613" | - | - |
Safe
|
| Grandstream Search vendor "Grandstream" | Grp2614 Firmware Search vendor "Grandstream" for product "Grp2614 Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2614 Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2614 Search vendor "Grandstream" for product "Grp2614" | - | - |
Safe
|
| Grandstream Search vendor "Grandstream" | Grp2615 Firmware Search vendor "Grandstream" for product "Grp2615 Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2615 Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2615 Search vendor "Grandstream" for product "Grp2615" | - | - |
Safe
|
| Grandstream Search vendor "Grandstream" | Grp2616 Firmware Search vendor "Grandstream" for product "Grp2616 Firmware" | 1.0.3.6 Search vendor "Grandstream" for product "Grp2616 Firmware" and version "1.0.3.6" | - |
Affected
| in | Grandstream Search vendor "Grandstream" | Grp2616 Search vendor "Grandstream" for product "Grp2616" | - | - |
Safe
|