Skip to content

Known vulnerabilities in n/a Grandstream UCM6200 Series

Is your version affected?

CVE Summary Score Published
CVE-2020-5759 Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH Not rated Jul 17, 2020
CVE-2020-5758 Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP Not rated Jul 17, 2020
CVE-2020-5757 Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP Not rated Jul 17, 2020
CVE-2020-5726 The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888 Not rated Mar 30, 2020
CVE-2020-5725 The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify… Not rated Mar 30, 2020
CVE-2020-5724 The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify… Not rated Mar 30, 2020
CVE-2020-5723 The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database Not rated Mar 30, 2020
CVE-2020-5722 Exploited Grandstream Networks UCM6200 Series SQL Injection Vulnerability 9.8 Critical Mar 23, 2020

Other n/a products