Login Request a demo
UF
Product
Ucm6208 Firmware
by Grandstream · last CVE Jul 17, 2020
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 3Medium 1Low 0
Severity
All severities7Critical3High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ucm6208 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-5759
9.8
3%
Jul 17
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH
Affected: through 1.0.20.23
CVE-2020-5757
9.8
7%
Jul 17
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP
Affected: through 1.0.20.23
CVE-2020-5723
9.8
6%
Mar 30
The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database
Affected: before 1.0.20.22
CVE-2020-5758
8.8
4%
Jul 17
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP
Affected: through 1.0.20.23
CVE-2020-5726
7.5
4%
Mar 30
The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888
Affected: before 1.0.20.22
CVE-2020-5724
7.5
12%
Mar 30
The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint
Affected: before 1.0.20.22
CVE-2020-5725
5.9
2%
Mar 30
The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint
Affected: before 1.0.20.22
Showing 7