CVE-2020-25217

Published March 29th, 2021

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

9

HIGH

Affected

1

PROJECT

Description

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.

mandiant/Vulnerability-Disclosures

GitHub

218