- Vulnerability/
- CVE-2020-5756
CVE-2020-5756
First published: Fri Jul 17 2020(Updated: )
Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.
Credit: vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Grandstream GWN7000 firmware | <=1.0.9.4 | |
| Grandstream GWN7000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-5756.
What is the severity of CVE-2020-5756?
CVE-2020-5756 has a severity rating of 8.8 (critical).
How does CVE-2020-5756 affect Grandstream GWN7000 firmware?
CVE-2020-5756 allows authenticated remote users to modify the system's crontab via an undocumented API, enabling them to execute arbitrary OS commands on the router.
Which versions of Grandstream GWN7000 firmware are affected by CVE-2020-5756?
Grandstream GWN7000 firmware version 1.0.9.4 and below are affected by CVE-2020-5756.
How can I fix CVE-2020-5756?
To fix CVE-2020-5756, update the Grandstream GWN7000 firmware to version 1.0.9.5 or higher.
- collector/nvd-index
- vendor/grandstream
- product/gwn7000 firmware
- canonical/grandstream gwn7000 firmware
- product/gwn7000
- canonical/grandstream gwn7000