Grandstream GXV3611IR Hd Firmware vulnerabilities

2 CVEs affecting Grandstream GXV3611IR Hd Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10661, published 2019-03-30.

More from Grandstream.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-10660, published 2019-03-30. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field.
• CVE-2019-10661, published 2019-03-30. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password.