Grandstream

Records57All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high32CVSS 7.0–8.9

Exploited now

Grandstream records in CISA KEV

TI-2020-04650 Grandstream Networks UCM6200 Series SQL Injection Vulnerability CRITICAL 100KEV 2022-01-28

Components

Products in the NVD configurations · select one to filter the records

Ucm6204 Firmware 9 records HIGH Gxp1628 Firmware 7 records HIGH Ht802 Firmware 7 records MEDIUM Ucm6202 Firmware 7 records MEDIUM Ucm6208 Firmware 7 records MEDIUM Gxp1610 Firmware 6 records HIGH Gxp1615 Firmware 6 records HIGH Gxp1620 Firmware 6 records HIGH

Records

7 records in Gxp1628 Firmware · all components

TI-2026-01969 CVE-2026-2329 · GHSA-r4m3-cm43-fxrj

Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow

HIGH 81

An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.41721 Published 2026-02-18 No fix listed CWE-121

TI-2025-20739 CVE-2025-28170 · GHSA-7wqx-pvjm-73q6

Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control.

HIGH 66

Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00351 Published 2025-07-29 No fix listed CWE-548

TI-2020-04667 CVE-2020-5739 · GHSA-6p3v-7x9x-66jr

Code injection in Grandstream GXP1600 Series

MEDIUM 46

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field i…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05339 Published 2020-04-14 No fix listed CWE-94

TI-2020-04666 CVE-2020-5738 · GHSA-h368-4vc2-fv34

Link following in Grandstream GXP1600 Series

MEDIUM 46

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05424 Published 2020-04-14 No fix listed CWE-59

TI-2018-12511 CVE-2018-17565 · GHSA-vcg4-x5rp-q29x

Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx…

MEDIUM 46

Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root shell.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01935 Published 2019-04-01 No fix listed CWE-78

TI-2018-12510 CVE-2018-17564 · GHSA-4xmw-cxj4-7pmf

A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128…

MEDIUM 45

A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01582 Published 2019-04-01 No fix listed

TI-2018-12509 CVE-2018-17563 · GHSA-f4cf-3gxr-mq99

A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP…

LOW 25

A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00699 Published 2019-04-01 No fix listed CWE-311

Open these records in search →