CVE-2018-17564: Critical severity Grandstream Gxp1610 Firmware vulnerability

Published Apr 1, 2019

Updated

A Malformed Input String to /cgi-bin/deleteCA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device.

Affected Software

12 affected components

Grandstream Gxp1610 Firmware=1.0.4.128

Grandstream GXP1610

Grandstream Gxp1615 Firmware=1.0.4.128

Grandstream GXP1615

Grandstream Gxp1620 Firmware=1.0.4.128

Grandstream GXP1620

Grandstream Gxp1625 Firmware=1.0.4.128

Grandstream GXP1625

Grandstream Gxp1628 Firmware=1.0.4.128

Grandstream GXP1628

Grandstream Gxp1630 Firmware=1.0.4.128

Grandstream GXP1630

Event History

Apr 1, 2019

CVE Published

via MITRE·08:50 PM

Data Sourced

via MITRE·08:50 PM

Description

Frequently Asked Questions

What is CVE-2018-17564?

CVE-2018-17564 is a vulnerability that allows attackers to delete configuration parameters and gain admin access to Grandstream GXP16xx VoIP 1.0.4.128 phones.

How severe is CVE-2018-17564?

CVE-2018-17564 has a severity rating of 9.8, which is considered critical.

Which software versions are affected by CVE-2018-17564?

Grandstream GXP1610 Firmware 1.0.4.128, Grandstream GXP1615 Firmware 1.0.4.128, Grandstream GXP1620 Firmware 1.0.4.128, Grandstream GXP1625 Firmware 1.0.4.128, and Grandstream GXP1628 Firmware 1.0.4.128 are affected by CVE-2018-17564.

How can an attacker exploit CVE-2018-17564?

An attacker can exploit CVE-2018-17564 by sending a malformed input string to /cgi-bin/delete_CA, which allows them to delete configuration parameters and gain admin access.

Where can I find more information about CVE-2018-17564?

You can find more information about CVE-2018-17564 at the following references: [Grandstream Firmware Support](http://grandstream.com/support/firmware) and [IridiumXOR Blog](https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/)