Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Grandstream Component: Ht802 Firmware Clear all filters
TI-2020-04690 CVE-2020-5762 · GHSA-gqxx-7rgw-867q

NULL pointer dereference in Grandstream HT800 Series

Priority LOW 39

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03361 Published 2020-07-29 No fix listed CWE-476
TI-2020-04689 CVE-2020-5761 · GHSA-9wp9-6795-j8rm

Infinite loop in Grandstream HT800 Series

Priority MEDIUM 40

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04093 Published 2020-07-29 No fix listed CWE-835
TI-2020-04688 CVE-2020-5760 · GHSA-cfmm-v9fq-4h4j

OS command injection in Grandstream HT800 Series

Priority MEDIUM 42

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0547 Published 2020-07-29 No fix listed CWE-78
TI-2017-12175 CVE-2017-16564 · GHSA-mc72-cfpm-m746

Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage…

Priority LOW 25

Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users to inject arbitrary web script or HTML via the DHCP vendor class ID field (P148)…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00614 Published 2017-11-06 No fix listed CWE-79