CVE-2019-10660: Grandstream GXV3611IR Hd Firmware

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field.

Affected products

• Grandstream GXV3611IR Hd Firmware: before 1.0.3.23 (fixed in 1.0.3.23)

Published 2019-03-30. Last modified 2026-06-17.