CVE-2023-50015: High severity Grandstream GXP14XX vulnerability

Published Mar 9, 2024

Updated

An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token.

Affected Software

2 affected components

Grandstream GXP14XX

Grandstream GXP16XX

Event History

Mar 9, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-50015?

CVE-2023-50015 is categorized as a high severity vulnerability due to its ability to allow remote attackers to escalate privileges.

How do I fix CVE-2023-50015?

To fix CVE-2023-50015, it is recommended to update the affected Grandstream devices to the latest firmware version provided by the vendor.

What devices are affected by CVE-2023-50015?

CVE-2023-50015 affects the Grandstream GXP14XX version 1.0.8.9 and GXP16XX version 1.0.7.13.

What type of vulnerability is CVE-2023-50015?

CVE-2023-50015 is an access control vulnerability that allows privilege escalation through improper handling of session-identity tokens.

Can CVE-2023-50015 be exploited remotely?

Yes, CVE-2023-50015 can be exploited remotely by attackers without physical access to the affected devices.