CyberSecBulletin

Grandstream UCM6200 Series vulnerabilities

We track 1 vulnerability in Grandstream UCM6200 Series products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on March 23, 2020.

1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score

Latest Grandstream UCM6200 Series vulnerabilities

  • 9.8 Critical severity

    Grandstream Networks UCM6200 Series SQL Injection Exploited

    CVE-2020-5722Grandstream UCM6200 SeriesEPSS 84.3%

    The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in pass