High severity · published Jul 29, 2020
CVE-2020-5760
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability
7.8
CVSS
5.5%
EPSS
No
On KEV
Description
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HF
Ht801 Firmware · Grandstream
through 1.0.17.5 · source: NVD
HF
Ht802 Firmware · Grandstream
through 1.0.17.5 · source: NVD
HF
Ht812 Firmware · Grandstream
through 1.0.17.5 · source: NVD
HF
Ht813 Firmware · Grandstream
through 1.0.17.5 · source: NVD
HF
Ht814 Firmware · Grandstream
through 1.0.17.5 · source: NVD
HF
Ht818 Firmware · Grandstream
through 1.0.17.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-5760
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-5760
Exploit
https://www.tenable.com/security/research/tra-2020-43
Third Party Advisory
https://www.tenable.com/security/research/tra-2020-47
More from Ht801 Firmware
8.8
CVE-2021-37915
An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8
8.8
CVE-2021-37748
Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary…
8.8
CVE-2020-5763
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service
7.5
CVE-2020-5762
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service
7.5
CVE-2020-5761
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service