What the vulnerability does

01Description

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Key dates

02Disclosure timeline

July 29, 2020 CVE published
August 4, 2024 Record updated