// For flags

CVE-2020-5722

Grandstream Networks UCM6200 Series SQL Injection Vulnerability

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

4
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

-
*SSVC
Descriptions

The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.

La interfaz HTTP de la serie Grandstream UCM6200 es vulnerable a una inyección SQL remota no autenticada por medio de una petición HTTP diseñada. Un atacante puede usar esta vulnerabilidad para ejecutar comandos de shell como root en versiones anteriores a 1.0.19.20 o inyectar HTML en correos electrónicos de recuperación de contraseña en versiones anteriores a 1.0.20.17.

UCM6202 version 1.0.18.13 suffers from a remote command injection vulnerability.

Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-01-06 CVE Reserved
  • 2020-03-23 CVE Published
  • 2020-03-24 First Exploit
  • 2022-01-28 Exploited in Wild
  • 2022-07-28 KEV Due Date
  • 2024-08-04 CVE Updated
  • 2024-10-04 EPSS Updated
CWE
  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Grandstream
Search vendor "Grandstream"
 Ucm6200 Firmware
Search vendor "Grandstream" for product "Ucm6200 Firmware"
 < 1.0.19.20
Search vendor "Grandstream" for product "Ucm6200 Firmware" and version " < 1.0.19.20"
-
Affected
in Grandstream
Search vendor "Grandstream"
 Ucm6200
Search vendor "Grandstream" for product "Ucm6200"
--
Safe