CVE-2020-5722: Grandstream Networks UCM6200 Series SQL Injection Vulnerability
First published: Mon Mar 23 2020(Updated: )
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.
Credit: vulnreport@tenable.com vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Grandstream UCM6200 | ||
| Grandstream Ucm6200 Firmware | <1.0.19.20 | |
| Grandstream UCM6200 | ||
| All of | ||
| Grandstream Ucm6200 Firmware | <1.0.19.20 | |
| Grandstream UCM6200 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/156876/UCM6202-1.0.18.13-Remote-Command-Injection.html
- http://packetstormsecurity.com/files/165708/Grandstream-UCM62xx-IP-PBX-sendPasswordEmail-Remote-Code-Execution.html
- https://www.tenable.com/security/research/tra-2020-15
- https://nvd.nist.gov/vuln/detail/CVE-2020-5722
Frequently Asked Questions
What is CVE-2020-5722?
CVE-2020-5722 is a SQL Injection vulnerability in the Grandstream Networks UCM6200 Series.
How does CVE-2020-5722 affect the Grandstream UCM6200 series?
CVE-2020-5722 allows an unauthenticated remote attacker to execute shell commands as root or inject HTML in password recovery emails on Grandstream UCM6200 firmware versions before 1.0.19.20.
What is the severity of CVE-2020-5722?
CVE-2020-5722 has a severity rating of 9.8 (Critical) based on CVSS v3.1.
How can I fix CVE-2020-5722?
To fix CVE-2020-5722, update Grandstream UCM6200 firmware to version 1.0.19.20 or later.
Where can I find more information about CVE-2020-5722?
You can find more information about CVE-2020-5722 on the following references: [1] [2] [3]
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/description
- agent/event
- agent/author
- agent/title
- agent/severity
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/weakness
- agent/references
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- vendor/grandstream
- canonical/grandstream ucm6200
- canonical/grandstream ucm6200 firmware