CVE-2020-5763: Weak Encryption
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-5763?
CVE-2020-5763 is a vulnerability in the Grandstream HT800 series firmware version 1.0.17.5 and below that contains a backdoor in the SSH service, allowing an authenticated remote attacker to obtain a root shell.
How severe is CVE-2020-5763?
CVE-2020-5763 has a severity score of 8.8 (Critical).
Which software versions are affected by CVE-2020-5763?
Grandstream HT800 series firmware version 1.0.17.5 and below are affected by CVE-2020-5763.
How can an attacker exploit CVE-2020-5763?
An authenticated remote attacker can exploit CVE-2020-5763 by correctly answering a challenge prompt in the SSH service to obtain a root shell.
Are there any reference links for CVE-2020-5763?
Yes, you can find more information about CVE-2020-5763 at the following links: [Tenable Research Advisory TRA-2020-43](https://www.tenable.com/security/research/tra-2020-43) and [Tenable Research Advisory TRA-2020-47](https://www.tenable.com/security/research/tra-2020-47).