CVE-2020-5763: Grandstream HT801 Firmware

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt.

Affected products

• Grandstream HT801 Firmware: up to and including 1.0.17.5
• Grandstream HT802 Firmware: up to and including 1.0.17.5
• Grandstream HT812 Firmware: up to and including 1.0.17.5
• Grandstream HT813 Firmware: up to and including 1.0.17.5
• Grandstream HT814 Firmware: up to and including 1.0.17.5
• Grandstream HT818 Firmware: up to and including 1.0.17.5

Published 2020-07-29. Last modified 2026-06-17.