PT-2020-18680
CVE-2020-5759
·
تاريخ النشر
2020-07-17
·
تاريخ التحديث
2020-07-23
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Grandstream UCM6200 series firmware version 1.0.20.23 and below
Description
The issue allows an authenticated remote attacker to execute commands as the root user by issuing a specially crafted "unset" command via SSH, which can lead to OS command injection.
Recommendations
For Grandstream UCM6200 series firmware version 1.0.20.23 and below, update to a version above 1.0.20.23 to resolve the issue. At the moment, there is no other information about additional mitigation measures.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾