Medium severity · published Jul 29, 2025
CVE-2025-28172
Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of Excessive Authentication Attempts
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of Excessive Authentication Attempts. An attacker can perform an arbitrary number of authentication attempts using different passwords and eventually gain access to the targeted account using a brute force attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UF
Ucm6510 Firmware · Grandstream
through 1.0.20.52 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-28172
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-28172
Third Party Advisory
https://gist.github.com/Exek1el/6291185a87c98d4229181212b2bd5cdf
More from Ucm6510 Firmware
6.5
CVE-2025-28171
An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi
