CyberSec.Space Logo
Back to CVE Browser

CVE-2018-17565

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0130%
EPSS Percentile4.51th
PublishedApr 1, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root shell.

Affected Platforms (CPE)

💻
Grandstream

Gxp1610 Firmware

= 1.0.4.128
💻
Grandstream

Gxp1615 Firmware

= 1.0.4.128
💻
Grandstream

Gxp1620 Firmware

= 1.0.4.128
💻
Grandstream

Gxp1625 Firmware

= 1.0.4.128
💻
Grandstream

Gxp1628 Firmware

= 1.0.4.128
💻
Grandstream

Gxp1630 Firmware

= 1.0.4.128

References & Advisories

🔗 http://grandstream.com/support/firmware
🔗 https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/
🔗 http://grandstream.com/support/firmware
🔗 https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/

Related Vulnerabilities

CVE-2018-487210.0

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006...

CVE-2018-100012410.0

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.p...

CVE-2018-010110.0

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could ...

CVE-2018-666710.0

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remo...