Grandstream GDS3710 Firmware vulnerabilities

2 CVEs affecting Grandstream GDS3710 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-2070, published 2022-09-23.

More from Grandstream.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-2070, published 2022-09-23. Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days. In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could…
• CVE-2022-2025, published 2022-09-23. Critical severity, CVSS 9.8. EPSS: 5.5% chance of exploitation in the next 30 days. an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The…