Grandstream HT801 Firmware vulnerabilities
6 CVEs affecting Grandstream HT801 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-37915, published 2021-10-28.
More from Grandstream.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2021-37748, published 2021-10-28. High severity, CVSS 8.8. EPSS: 7.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a…
- CVE-2020-5760, published 2020-07-29. High severity, CVSS 7.8. EPSS: 5.5% chance of exploitation in the next 30 days. Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by…
- CVE-2020-5761, published 2020-07-29. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service. Unauthenticated remote attackers can trigger this case by…
- CVE-2020-5762, published 2020-07-29. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service. An unauthenticated remote attacker can stop the service due to a…
- CVE-2020-5763, published 2020-07-29. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt.
- CVE-2021-37915, published 2021-10-28. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From the limited configuration shell, it is possible to set the malicious gdb_debug_server variable. As a…