CVE-2015-2866: SQL Injection
Published Jul 8, 2015
·Updated
SQL injection vulnerability on the Grandstream GXV3611HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to establish a TELNET session with a crafted username.
Affected Software
2 affected components
Grandstream Gxv3611 Hd Firmware<=1.0.3.6
Grandstream Gxv3611 Hd
Event History
Jul 8, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2866?
CVE-2015-2866 has a medium severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2015-2866?
To fix CVE-2015-2866, upgrade the Grandstream GXV3611_HD camera firmware to version 1.0.3.9 beta or later.
3
What systems are affected by CVE-2015-2866?
CVE-2015-2866 affects the Grandstream GXV3611_HD camera with firmware versions prior to 1.0.3.9 beta.
4
Can CVE-2015-2866 be exploited remotely?
Yes, CVE-2015-2866 can be exploited remotely by attackers who initiate a TELNET session with a crafted username.
5
What types of attacks can be performed using CVE-2015-2866?
CVE-2015-2866 allows attackers to execute arbitrary SQL commands, potentially compromising the database.