Gds3710 Firmware vulnerabilities

2 known vulnerabilities in Gds3710 Firmware from Grandstream. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Grandstream GSD3710: Out-of-bounds Write

  CVE-2022-2070Sep 23, 2022GrandstreamEPSS 5.84%

  In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a

• 9.8 Critical severity

  Grandstream GSD3710: Out-of-bounds Write

  CVE-2022-2025Sep 23, 2022GrandstreamEPSS 5.45%

  an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute