CVE-2020-5761: Grandstream HT801 Firmware

High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days.

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by sending a one character TCP message to the TR-069 service.

Affected products

• Grandstream HT801 Firmware: up to and including 1.0.17.5
• Grandstream HT802 Firmware: up to and including 1.0.17.5
• Grandstream HT812 Firmware: up to and including 1.0.17.5
• Grandstream HT813 Firmware: up to and including 1.0.17.5
• Grandstream HT814 Firmware: up to and including 1.0.17.5
• Grandstream HT818 Firmware: up to and including 1.0.17.5

Published 2020-07-29. Last modified 2026-06-17.