Grandstream 漏洞

时间轴

类型

Not Defined39
IP Phone Software4
Android App Software3
Network Camera Software1

产品

Grandstream UCM62007
Grandstream HT8004
Grandstream GWN70003
Grandstream GXP16xx VoIP3
Grandstream Wave App3

修正

Official Fix17
Temporary Fix0
Workaround0
Unavailable3
Not Defined27

易受攻击性

High1
Functional0
Proof-of-Concept8
Unproven1
Not Defined37

访问向量

Not Defined0
Physical0
Local0
Adjacent2
Network45

身份验证

Not Defined0
High0
Low17
None30

用户交互

Not Defined0
Required2
None45

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤66
≤79
≤816
≤911
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤53
≤65
≤710
≤816
≤99
≤104

VulDB

≤10
≤20
≤30
≤40
≤52
≤611
≤713
≤812
≤95
≤104

NVD

≤10
≤20
≤30
≤40
≤50
≤63
≤71
≤87
≤912
≤109

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k25
<5k20
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k40
<2k5
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (39): BudgeTone (1), BudgeTone 200 (1), Budgetone 102 (1), GAC2500 (1), GRP261x (2), GSD3710 (2), GVC3202 (1), GWN7000 (3), GWN7610 (2), GXP-2000 (1), GXP14XX (1), GXP16XX (1), GXP16xx VoIP (3), GXP1600 (2), GXP2200 (1), GXV3240 (1), GXV3275 (1), GXV3370 (1), GXV3500 (1), GXV3501 (1), GXV3504 (1), GXV3601 (1), GXV3601HD-LL (1), GXV3611HD-LL (1), GXV3611IR_HD (2), GXV3611_HD Camera (1), GXV3615W-P (1), GXV3615WP_HD (1), GXV3651FHD (1), GXV3662HD (1), Gxv Device (2), HT800 (4), HT801 (2), Ht488 (2), SIP Phone (1), UCM6200 (7), UCM6204 (2), WP820 (1), Wave App (3)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-03-096.36.1Grandstream GXP14XX/GXP16XX End-User Session-Identity Token 权限升级未知Not DefinedNot Defined0.000430.05CVE-2023-50015
2022-09-249.39.3Grandstream GSD3710 strcopy 内存损坏未知Not DefinedNot Defined0.002000.00CVE-2022-2025
2022-09-249.89.6Grandstream GSD3710 sscanf 内存损坏未知Not DefinedNot Defined0.001750.00CVE-2022-2070
2021-10-286.36.0Grandstream HT801 Limited Configuration Shell Privilege Escalation未知Not DefinedOfficial Fix0.002710.00CVE-2021-37915
2021-10-288.87.9Grandstream HT801 Limited Configuration Shell gs_config 权限升级未知Proof-of-ConceptOfficial Fix0.012750.00CVE-2021-37748
2021-03-308.08.0Grandstream GRP261x Administrative Web Interface 弱身份验证未知Not DefinedNot Defined0.002350.04CVE-2020-25218
2021-03-307.67.6Grandstream GRP261x Administrative Web Interface 权限升级未知Not DefinedNot Defined0.001410.02CVE-2020-25217
2020-07-297.57.5Grandstream HT800 SSH Service Privilege Escalation未知Not DefinedNot Defined0.005040.00CVE-2020-5763
2020-07-296.46.4Grandstream HT800 TR-069 Service 拒绝服务未知Not DefinedNot Defined0.005750.00CVE-2020-5762
2020-07-296.46.4Grandstream HT800 TR-069 Service 拒绝服务未知Not DefinedNot Defined0.007290.00CVE-2020-5761

37 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 37 results.

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!