CVE-2018-17563
First published: Mon Apr 01 2019(Updated: )
A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Grandstream Gxp1610 Firmware | =1.0.4.128 | |
| Grandstream Gxp1610 | ||
| Grandstream Gxp1615 Firmware | =1.0.4.128 | |
| Grandstream Gxp1615 | ||
| Grandstream Gxp1620 Firmware | =1.0.4.128 | |
| Grandstream Gxp1620 | ||
| Grandstream Gxp1625 Firmware | =1.0.4.128 | |
| Grandstream Gxp1625 | ||
| Grandstream Gxp1628 Firmware | =1.0.4.128 | |
| Grandstream Gxp1628 | ||
| Grandstream Gxp1630 Firmware | =1.0.4.128 | |
| Grandstream Gxp1630 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2018-17563.
What is the severity rating of CVE-2018-17563?
CVE-2018-17563 has a severity rating of 5.3 out of 10.
How can this vulnerability be exploited?
Attackers can exploit this vulnerability by sending a malformed input string to the /cgi-bin/api-get_line_status endpoint on Grandstream GXP16xx VoIP 1.0.4.128 phones.
What is the impact of exploiting CVE-2018-17563?
Exploiting CVE-2018-17563 allows attackers to dump the device's configuration in cleartext.
How can I mitigate the vulnerability in Grandstream GXP16xx VoIP 1.0.4.128 phones?
To mitigate this vulnerability, it is recommended to update the firmware of the affected devices to a version that addresses the issue. Refer to the vendor's support website for available firmware updates.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/grandstream
- canonical/grandstream gxp1610 firmware
- version/grandstream gxp1610 firmware/1.0.4.128
- canonical/grandstream gxp1610
- canonical/grandstream gxp1615 firmware
- version/grandstream gxp1615 firmware/1.0.4.128
- canonical/grandstream gxp1615
- canonical/grandstream gxp1620 firmware
- version/grandstream gxp1620 firmware/1.0.4.128
- canonical/grandstream gxp1620
- canonical/grandstream gxp1625 firmware
- version/grandstream gxp1625 firmware/1.0.4.128
- canonical/grandstream gxp1625
- canonical/grandstream gxp1628 firmware
- version/grandstream gxp1628 firmware/1.0.4.128
- canonical/grandstream gxp1628
- canonical/grandstream gxp1630 firmware
- version/grandstream gxp1630 firmware/1.0.4.128
- canonical/grandstream gxp1630