CVE-2020-5762: Grandstream HT801 Firmware

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a NULL pointer dereference in the TR-069 service. This condition is triggered due to mishandling of the HTTP Authentication field.

Affected products

• Grandstream HT801 Firmware: up to and including 1.0.17.5
• Grandstream HT802 Firmware: up to and including 1.0.17.5
• Grandstream HT812 Firmware: up to and including 1.0.17.5
• Grandstream HT813 Firmware: up to and including 1.0.17.5
• Grandstream HT814 Firmware: up to and including 1.0.17.5
• Grandstream HT818 Firmware: up to and including 1.0.17.5

Published 2020-07-29. Last modified 2026-06-17.