Grandstream UCM6510 up to 1.0.20.52 excessive authentication

Summaryinfo

A vulnerability marked as problematic has been reported in Grandstream UCM6510 up to 1.0.20.52. This vulnerability affects unknown code. The manipulation leads to excessive authentication. This vulnerability is referenced as CVE-2025-28172. No exploit is available.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Grandstream UCM6510 up to 1.0.20.52. This issue affects an unknown code. The manipulation with an unknown input leads to a excessive authentication vulnerability. Using CWE to declare the problem leads to CWE-307. The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks. Impacted is confidentiality. The summary by CVE is:

Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of Excessive Authentication Attempts. An attacker can perform an arbitrary number of authentication attempts using different passwords and eventually gain access to the targeted account using a brute force attack.

The identification of this vulnerability is CVE-2025-28172 since 03/11/2025. The exploitation is known to be difficult. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1110.001 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Grandstream

Name

• UCM6510

Version

• 1.0.20.0
• 1.0.20.1
• 1.0.20.2
• 1.0.20.3
• 1.0.20.4
• 1.0.20.5
• 1.0.20.6
• 1.0.20.7
• 1.0.20.8
• 1.0.20.9
• 1.0.20.10
• 1.0.20.11
• 1.0.20.12
• 1.0.20.13
• 1.0.20.14
• 1.0.20.15
• 1.0.20.16
• 1.0.20.17
• 1.0.20.18
• 1.0.20.19
• 1.0.20.20
• 1.0.20.21
• 1.0.20.22
• 1.0.20.23
• 1.0.20.24
• 1.0.20.25
• 1.0.20.26
• 1.0.20.27
• 1.0.20.28
• 1.0.20.29
• 1.0.20.30
• 1.0.20.31
• 1.0.20.32
• 1.0.20.33
• 1.0.20.34
• 1.0.20.35
• 1.0.20.36
• 1.0.20.37
• 1.0.20.38
• 1.0.20.39
• 1.0.20.40
• 1.0.20.41
• 1.0.20.42
• 1.0.20.43
• 1.0.20.44
• 1.0.20.45
• 1.0.20.46
• 1.0.20.47
• 1.0.20.48
• 1.0.20.49
• 1.0.20.50
• 1.0.20.51
• 1.0.20.52

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion