CVE-2020-5760: Grandstream HT801 Firmware

High severity, CVSS 7.8. EPSS: 5.5% chance of exploitation in the next 30 days.

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Affected products

• Grandstream HT801 Firmware: up to and including 1.0.17.5
• Grandstream HT802 Firmware: up to and including 1.0.17.5
• Grandstream HT812 Firmware: up to and including 1.0.17.5
• Grandstream HT813 Firmware: up to and including 1.0.17.5
• Grandstream HT814 Firmware: up to and including 1.0.17.5
• Grandstream HT818 Firmware: up to and including 1.0.17.5

Published 2020-07-29. Last modified 2026-06-17.