CVE-2018-17563: Medium severity Grandstream Gxp1610 Firmware vulnerability
Published Apr 1, 2019
·Updated
A Malformed Input String to /cgi-bin/api-getlinestatus on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.
Affected Software
12 affected components
Grandstream Gxp1610 Firmware=1.0.4.128
Grandstream GXP1610
Grandstream Gxp1615 Firmware=1.0.4.128
Grandstream GXP1615
Grandstream Gxp1620 Firmware=1.0.4.128
Grandstream GXP1620
Grandstream Gxp1625 Firmware=1.0.4.128
Grandstream GXP1625
Grandstream Gxp1628 Firmware=1.0.4.128
Grandstream GXP1628
Grandstream Gxp1630 Firmware=1.0.4.128
Grandstream GXP1630
Event History
Apr 1, 2019
CVE Published
via MITRE·08:49 PM
Data Sourced
via MITRE·08:49 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2018-17563.
2
What is the severity rating of CVE-2018-17563?
CVE-2018-17563 has a severity rating of 5.3 out of 10.
3
How can this vulnerability be exploited?
Attackers can exploit this vulnerability by sending a malformed input string to the /cgi-bin/api-get_line_status endpoint on Grandstream GXP16xx VoIP 1.0.4.128 phones.
4
What is the impact of exploiting CVE-2018-17563?
Exploiting CVE-2018-17563 allows attackers to dump the device's configuration in cleartext.
5
How can I mitigate the vulnerability in Grandstream GXP16xx VoIP 1.0.4.128 phones?
To mitigate this vulnerability, it is recommended to update the firmware of the affected devices to a version that addresses the issue. Refer to the vendor's support website for available firmware updates.