Ucm6200 Firmware vulnerabilities

1 known vulnerability in Ucm6200 Firmware from Grandstream. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Grandstream Networks UCM6200 Series SQL Injection Exploited

  CVE-2020-5722Mar 23, 2020Grandstream UCM6200 SeriesEPSS 84.3%

  The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in pass