PT-2019-9506
CVE-2018-17565
·
Publicado
2019-04-01
·
Atualizado
2019-10-03
Descrição por
CVSS 2.0
10
CríticaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Grandstream GXP16xx VoIP version 1.0.4.128
Description
The issue allows attackers to execute arbitrary system commands and gain a root shell due to Shell Metacharacter Injection in the SSH configuration interface.
Recommendations
For Grandstream GXP16xx VoIP version 1.0.4.128, update the software to a version that fixes this issue, as using the current version poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾