CVE-2020-5760

EPSS 5.5%CWE-78

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 5.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jul 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Produtos afetados

n/a · Grandstream HT800 Series

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.tenable.com/security/research/tra-2020-43 https://www.tenable.com/security/research/tra-2020-47