Login Request a demo
GR
Vendor
Grandstream
76 products with CVEs on record
178
CVEs
2
On KEV
0
New 30D
Products
UC
UCM6200
Grandstream
9.8
1 CVEs1 on KEV0 new
UF
Ucm6200 Firmware
Grandstream
9.8
1 CVEs1 on KEV0 new
UF
Ucm6204 Firmware
Grandstream
9.8
9 CVEs0 on KEV0 new
GF
Gxp1628 Firmware
Grandstream
9.8
7 CVEs0 on KEV0 new
HF
Ht802 Firmware
Grandstream
8.8
7 CVEs0 on KEV0 new
UF
Ucm6202 Firmware
Grandstream
9.8
7 CVEs0 on KEV0 new
UF
Ucm6208 Firmware
Grandstream
9.8
7 CVEs0 on KEV0 new
GF
Gxp1610 Firmware
Grandstream
9.8
6 CVEs0 on KEV0 new
GF
Gxp1615 Firmware
Grandstream
9.8
6 CVEs0 on KEV0 new
GF
Gxp1620 Firmware
Grandstream
9.8
6 CVEs0 on KEV0 new
GF
Gxp1625 Firmware
Grandstream
9.8
6 CVEs0 on KEV0 new
GF
Gxp1630 Firmware
Grandstream
9.8
6 CVEs0 on KEV0 new
HF
Ht801 Firmware
Grandstream
8.8
6 CVEs0 on KEV0 new
HF
Ht812 Firmware
Grandstream
8.8
4 CVEs0 on KEV0 new
HF
Ht813 Firmware
Grandstream
8.8
4 CVEs0 on KEV0 new
HF
Ht814 Firmware
Grandstream
8.8
4 CVEs0 on KEV0 new
HF
Ht818 Firmware
Grandstream
8.8
4 CVEs0 on KEV0 new
GF
Gwn7000 Firmware
Grandstream
8.8
3 CVEs0 on KEV0 new
WA
Wave
Grandstream
8.1
3 CVEs0 on KEV0 new
GF
Gds3710 Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2612 Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2612p Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2612w Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2613 Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2614 Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2615 Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Grp2616 Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GF
Gwn7610 Firmware
Grandstream
8.8
2 CVEs0 on KEV0 new
GX
GXP1625
Grandstream
9.8
2 CVEs0 on KEV0 new
GD
Gxv Device Firmware
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3500
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3501
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3504
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3601
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3601hd/ll
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3611hd/ll
Grandstream
–
2 CVEs0 on KEV0 new
GH
Gxv3611ir HD Firmware
Grandstream
9.8
2 CVEs0 on KEV0 new
GX
Gxv3615w/p
Grandstream
–
2 CVEs0 on KEV0 new
GH
Gxv3615wp HD
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3651fhd
Grandstream
–
2 CVEs0 on KEV0 new
GX
Gxv3662hd
Grandstream
–
2 CVEs0 on KEV0 new
HT
Ht488
Grandstream
–
2 CVEs0 on KEV0 new
UF
Ucm6510 Firmware
Grandstream
6.5
2 CVEs0 on KEV0 new
BF
Bt-100 Firmware
Grandstream
7.5
1 CVEs0 on KEV0 new
B1
Budgetone 101
Grandstream
–
1 CVEs0 on KEV0 new
B1
Budgetone 102
Grandstream
–
1 CVEs0 on KEV0 new
B2
Budgetone 200
Grandstream
–
1 CVEs0 on KEV0 new
GF
Gac2500 Firmware
Grandstream
9.8
1 CVEs0 on KEV0 new
GF
Gvc3202 Firmware
Grandstream
9.8
1 CVEs0 on KEV0 new
GX
Gxp-2000
Grandstream
–
1 CVEs0 on KEV0 new
GX
GXP1610
Grandstream
9.8
1 CVEs0 on KEV0 new
GX
GXP1615
Grandstream
9.8
1 CVEs0 on KEV0 new
GX
GXP1620
Grandstream
9.8
1 CVEs0 on KEV0 new
GX
GXP1628
Grandstream
9.8
1 CVEs0 on KEV0 new
GX
GXP1630
Grandstream
9.8
1 CVEs0 on KEV0 new
GF
Gxp2135 Firmware
Grandstream
9.8
1 CVEs0 on KEV0 new
GF
Gxp2200 Firmware
Grandstream
9.8
1 CVEs0 on KEV0 new
GF
Gxv3240 Firmware
Grandstream
9.8
1 CVEs0 on KEV0 new
GF
Gxv3275 Firmware
Grandstream
9.8
1 CVEs0 on KEV0 new
GF
Gxv3370 Firmware
Grandstream
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-2329
GX
GXP1630
Grandstream
9.8
42%
Feb 18Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
CVE-2025-14186
GX
GXP1625
Grandstream
3.5
0%
Dec 7Grandstream GXP1625 Network Status api.values.post cross site scripting
CVE-2025-28170
GF
Gxp1628 Firmware
Grandstream
7.6
0%
Jul 29Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control
CVE-2025-28171
UF
Ucm6510 Firmware
Grandstream
6.5
0%
Jul 29An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi
CVE-2025-28172
UF
Ucm6510 Firmware
Grandstream
6.5
0%
Jul 29Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of Excessive Authentication Attempts
CVE-2024-32937
GF
Gxp2135 Firmware
Grandstream
9.8
27%
Jul 3An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79
CVE-2022-2070
GF
Gds3710 Firmware
Grandstream
9.8
6%
Sep 23In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction
CVE-2022-2025
GF
Gds3710 Firmware
Grandstream
9.8
5%
Sep 23an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy…
CVE-2021-37915
HF
Ht801 Firmware
Grandstream
8.8
2%
Oct 28An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8
CVE-2021-37748
HF
Ht801 Firmware
Grandstream
8.8
7%
Oct 28Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary…
CVE-2020-25218
GF
Grp2612 Firmware
Grandstream
9.8
2%
Mar 29Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface
CVE-2020-25217
GF
Grp2612 Firmware
Grandstream
7.2
2%
Mar 29Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface
CVE-2020-5763
HF
Ht801 Firmware
Grandstream
8.8
3%
Jul 29Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service
CVE-2020-5762
HF
Ht814 Firmware
Grandstream
7.5
3%
Jul 29Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service attack against the TR-069 service
CVE-2020-5761
HF
Ht801 Firmware
Grandstream
7.5
4%
Jul 29Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due to an infinite loop in the TR-069 service
CVE-2020-5760
HF
Ht801 Firmware
Grandstream
7.8
5%
Jul 29Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability
CVE-2020-5759
UF
Ucm6202 Firmware
Grandstream
9.8
3%
Jul 17Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH
CVE-2020-5758
UF
Ucm6202 Firmware
Grandstream
8.8
4%
Jul 17Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP
CVE-2020-5757
UF
Ucm6204 Firmware
Grandstream
9.8
7%
Jul 17Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP
CVE-2020-5756
GF
Gwn7000 Firmware
Grandstream
8.8
2%
Jul 17Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API
CVE-2020-5739
GF
Gxp1610 Firmware
Grandstream
8.8
5%
Apr 14Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN…
CVE-2020-5738
GF
Gxp1625 Firmware
Grandstream
8.8
5%
Apr 14Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP…
CVE-2020-5726
UF
Ucm6202 Firmware
Grandstream
7.5
4%
Mar 30The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888
CVE-2020-5725
UF
Ucm6204 Firmware
Grandstream
5.9
2%
Mar 30The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint
CVE-2020-5724
UF
Ucm6204 Firmware
Grandstream
7.5
12%
Mar 30The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint
CVE-2020-5723
UF
Ucm6202 Firmware
Grandstream
9.8
6%
Mar 30The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database
CVE-2020-5722
In wildKEV
UF
Ucm6200 Firmware
Grandstream
9.8
84%
Mar 23Grandstream Networks UCM6200 Series SQL Injection Vulnerability
CVE-2013-3542
GF
Gxv3504 Firmware
Grandstream
10.0
3%
Dec 11Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware…
CVE-2018-17565
GF
Gxp1620 Firmware
Grandstream
9.8
2%
Apr 1Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root…
CVE-2018-17564
GF
Gxp1615 Firmware
Grandstream
9.8
2%
Apr 1A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device
CVE-2018-17563
GF
Gxp1615 Firmware
Grandstream
5.3
1%
Apr 1A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext
CVE-2019-10663
UF
Ucm6204 Firmware
Grandstream
8.8
28%
Mar 30Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi?…
CVE-2019-10662
UF
Ucm6204 Firmware
Grandstream
8.8
44%
Mar 30Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to…
CVE-2019-10661
GH
Gxv3611ir HD Firmware
Grandstream
9.8
2%
Mar 30On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password
CVE-2019-10660
GH
Gxv3611ir HD Firmware
Grandstream
8.8
3%
Mar 30Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver…
CVE-2019-10659
GF
Gxv3370 Firmware
Grandstream
8.8
3%
Mar 30Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a…
CVE-2019-10658
GF
Gwn7610 Firmware
Grandstream
8.8
3%
Mar 30Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a…
CVE-2019-10657
GF
Gwn7610 Firmware
Grandstream
6.5
1%
Mar 30Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request
CVE-2019-10656
GF
Gwn7000 Firmware
Grandstream
8.8
4%
Mar 30Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply…
CVE-2019-10655
GF
Gvc3202 Firmware
Grandstream
9.8
15%
Mar 30Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code…
CVE-2017-16565
HF
Ht802 Firmware
Grandstream
8.8
0%
Nov 6Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authenticate a user via the login screen using the default password…
CVE-2017-16564
HF
Ht802 Firmware
Grandstream
5.4
1%
Nov 6Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote authenticated users to inject arbitrary web script or HTML…
CVE-2017-16563
HF
Ht802 Firmware
Grandstream
8.0
0%
Nov 6Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to modify settings, related to cgi-bin/update
CVE-2016-1520
WA
Wave
Grandstream
7.8
2%
Apr 21The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary…
CVE-2016-1519
WA
Wave
Grandstream
5.9
1%
Apr 21The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers…
CVE-2016-1518
WA
Wave
Grandstream
8.1
2%
Apr 21The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof…
CVE-2015-2866
GH
Gxv3611 HD Firmware
Grandstream
–
2%
Jul 8SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to…
CVE-2013-3963
GH
Gxv3615wp HD
Grandstream
–
1%
Oct 1Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD,…
CVE-2013-3962
GD
Gxv Device Firmware
Grandstream
–
1%
Oct 1Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and…
CVE-2007-5789
HT
Ht488
Grandstream
–
2%
Nov 1The Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a flood of fragmented packets to port 5060
CVE-2007-5788
HT
Ht488
Grandstream
–
2%
Nov 1Buffer overflow in the SIP parser on the Grandstream HT-488 0.1 allows remote attackers to cause a denial of service (device crash) via a crafted SIP INVITE message
CVE-2007-4498
SP
Sip Phone
Grandstream
–
14%
Aug 23The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call completion, eavesdrop on the phone's local…
CVE-2007-1590
B2
Budgetone 200
Grandstream
–
4%
Mar 21The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2)…
CVE-2006-5231
GX
Gxp-2000
Grandstream
–
2%
Oct 11Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service (hang or reboot) via a large amount of ASCII data sent to…
CVE-2005-2581
B1
Budgetone 102
Grandstream
–
3%
Aug 16Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cause a denial of service (device hang or reboot) via a large…
CVE-2005-2182
BF
Bt-100 Firmware
Grandstream
7.5
1%
Jul 11Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows…