CVE-2022-2025: Grandstream GSD3710 Stack-based Buffer Overflow

Published Sep 23, 2022

Updated

an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute a shell with full access.

Affected Software

2 affected components

Grandstream Gds3710 Firmware=1.0.11.13

Grandstream Gds3710

Remediation

Information

This vulnerability has been solved by Grandstream in the 1.0.11.23 version.

Event History

Sep 23, 2022

CVE Published

via MITRE·03:06 PM

Data Sourced

via MITRE·03:06 PM

RemedyDescriptionSeverityWeakness

Jun 5, 2025

Exploit Published

12:00 AM

Known Exploited

06:22 PM

Frequently Asked Questions

What is CVE-2022-2025?

CVE-2022-2025 is a vulnerability that allows an attacker with knowledge of the user/pass of Grandstream GSD3710 version 1.0.11.13 to overflow the stack and execute a shell with full access.

What is the severity of CVE-2022-2025?

CVE-2022-2025 has a severity rating of 9.8, which is considered critical.

How does CVE-2022-2025 affect Grandstream GSD3710?

CVE-2022-2025 affects Grandstream GSD3710 version 1.0.11.13, allowing an attacker to overflow the stack and execute a shell with full access.

Is CVE-2022-2025 already being exploited?

There is no information available about current exploitation of CVE-2022-2025.

What can I do to mitigate CVE-2022-2025?

To mitigate CVE-2022-2025, it is recommended to update Grandstream GSD3710 to a version that addresses the vulnerability.