by Kastro
Paper/Archive/CVE-2020-5722

CVE-2020-5722

Grandstream UCM6200 — Grandstream Networks UCM6200 Series SQL Injection Vulnerability

KEV · due 28 JulEPSS 84%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.7.997 × 2019.9Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.

Affected

ProductAffectedFixed inSource
Grandstream UCM6200 SeriesBefore 1.0.20.17–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reftenable.com/security/research/tra-2020-15refpacketstormsecurity.com/files/156876/UCM6202-1.0.18.13-Remote-Command-Injection.htmlrefpacketstormsecurity.com/files/165708/Grandstream-UCM62xx-IP-PBX-sendPasswordEmail-Remote-Code-Execution.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-5722kevcisa.gov/known-exploited-vulnerabilities-catalog