CVE-2021-37915: Critical severity grandstream ht801 firmware vulnerability
An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From the limited configuration shell, it is possible to set the malicious gdbdebugserver variable. As a result, after a reboot, the device downloads and executes malicious scripts from an attacker-defined host.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37915?
CVE-2021-37915 is a vulnerability discovered on the Grandstream HT801 Analog Telephone Adaptor before version 1.0.29.8.
What is the severity of CVE-2021-37915?
CVE-2021-37915 has a severity rating of 8.8, which is considered critical.
How does CVE-2021-37915 affect the Grandstream HT801?
CVE-2021-37915 allows an attacker to set a malicious gdb_debug_server variable on the Grandstream HT801, which can result in the device downloading and executing malicious scripts from an attacker-defined host.
How can I fix the CVE-2021-37915 vulnerability?
To fix the CVE-2021-37915 vulnerability, it is recommended to update the Grandstream HT801 Analog Telephone Adaptor firmware to version 1.0.29.8 or later.
Where can I find more information about CVE-2021-37915?
You can find more information about CVE-2021-37915 on the Grandstream website and the provided references.