CVE-2020-5722: Grandstream Networks UCM6200 Series SQL Injection Vulnerability
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.
Other sources
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Grandstream UCM6200 Seriesto a version that resolves this vulnerability.Fixed in 1.0.19.20 - Upgrade
Upgrade
Grandstream UCM6200 Seriesto a version that resolves this vulnerability.Fixed in 1.0.20.17
Event History
Frequently Asked Questions
What is CVE-2020-5722?
CVE-2020-5722 is a SQL Injection vulnerability in the Grandstream Networks UCM6200 Series.
How does CVE-2020-5722 affect the Grandstream UCM6200 series?
CVE-2020-5722 allows an unauthenticated remote attacker to execute shell commands as root or inject HTML in password recovery emails on Grandstream UCM6200 firmware versions before 1.0.19.20.
What is the severity of CVE-2020-5722?
CVE-2020-5722 has a severity rating of 9.8 (Critical) based on CVSS v3.1.
How can I fix CVE-2020-5722?
To fix CVE-2020-5722, update Grandstream UCM6200 firmware to version 1.0.19.20 or later.
Where can I find more information about CVE-2020-5722?
You can find more information about CVE-2020-5722 on the following references: [1] [2] [3]