CVE-2020-5738 - AskarLabs CVE Database

CVE-2020-5738

Vendor N/A

Product Grandstream GXP1600 Series

Weakness CWE-59

Published April 14, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.

Key dates

02Disclosure timeline

April 14, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-5738 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/59.html

Related vulnerabilities

04Related CVE

CVE-2025-55188 CVE-2024-45316 CVE-2026-45539 Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree CVE-2020-8015 Local privilege escalation in exim package from user mail to root CVE-2025-25008 Windows Server Elevation of Privilege Vulnerability