What is CVE-2022-2025?

CVE-2022-2025 is a vulnerability that allows an attacker with knowledge of the user/pass of Grandstream GSD3710 version 1.0.11.13 to overflow the stack and execute a shell with full access.

What is the severity of CVE-2022-2025?

CVE-2022-2025 has a severity rating of 9.8, which is considered critical.

How does CVE-2022-2025 affect Grandstream GSD3710?

CVE-2022-2025 affects Grandstream GSD3710 version 1.0.11.13, allowing an attacker to overflow the stack and execute a shell with full access.

Is CVE-2022-2025 already being exploited?

There is no information available about current exploitation of CVE-2022-2025.

What can I do to mitigate CVE-2022-2025?

To mitigate CVE-2022-2025, it is recommended to update Grandstream GSD3710 to a version that addresses the vulnerability.

Vulnerability/
CVE-2022-2025

critical

9.8

CWE

787 121

20/9/2022

3/8/2024

CVE-2022-2025: Grandstream GSD3710 Stack-based Buffer Overflow

First published: Tue Sep 20 2022(Updated: )

an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute a shell with full access.

Credit: cve-coordination@incibe.es

Affected Software	Affected Version	How to fix
Grandstream Gds3710 Firmware	=1.0.11.13
Grandstream Gds3710

Remedy

This vulnerability has been solved by Grandstream in the 1.0.11.23 version.

Never miss a vulnerability like this again

Reference Links

https://www.incibe-cert.es/en/early-warning/security-advisories/buffer-overflow-vulnerabilities-grandstream-gsd3710

Frequently Asked Questions

What is CVE-2022-2025?
CVE-2022-2025 is a vulnerability that allows an attacker with knowledge of the user/pass of Grandstream GSD3710 version 1.0.11.13 to overflow the stack and execute a shell with full access.
What is the severity of CVE-2022-2025?
CVE-2022-2025 has a severity rating of 9.8, which is considered critical.
How does CVE-2022-2025 affect Grandstream GSD3710?
CVE-2022-2025 affects Grandstream GSD3710 version 1.0.11.13, allowing an attacker to overflow the stack and execute a shell with full access.
Is CVE-2022-2025 already being exploited?
There is no information available about current exploitation of CVE-2022-2025.
What can I do to mitigate CVE-2022-2025?
To mitigate CVE-2022-2025, it is recommended to update Grandstream GSD3710 to a version that addresses the vulnerability.

collector/nvd-index
agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/title
agent/severity
agent/author
agent/references
agent/remedy
agent/description
agent/first-publish-date
agent/event
agent/tags
vendor/grandstream
canonical/grandstream gds3710 firmware
version/grandstream gds3710 firmware/1.0.11.13
canonical/grandstream gds3710

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.