GF
Product
Gxp1625 Firmware
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Gxp1625 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2329 | 9.8 | Feb 18 | Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow Affected: before 1.0.7.81 |
| CVE-2018-17565 | 9.8 | Apr 1 | Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root… Affected: 1.0.4.128 |
| CVE-2018-17564 | 9.8 | Apr 1 | A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device Affected: 1.0.4.128 |
| CVE-2020-5739 | 8.8 | Apr 14 | Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN… Affected: through 1.0.4.152 |
| CVE-2020-5738 | 8.8 | Apr 14 | Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP… Affected: through 1.0.4.152 |
| CVE-2018-17563 | 5.3 | Apr 1 | A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext Affected: 1.0.4.128 |
Showing 6