Known vulnerabilities in Grandstream Basic IP Phones firmware

Vendor: Grandstream Networks, Inc.
Software: Grandstream Basic IP Phones firmware
Software CPE: cpe:2.3:h:grandstream_networks:grandstream_basic_ip_phones_firmware:*:*:*:*:*:*:*:*
Website: https://www.grandstream.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Grandstream Basic IP Phones firmware Grandstream Basic IP Phones firmware is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22869 - Permissions, Privileges, and Access Controls
CVE-2018-17564		 CWE-264 High
No
No
 1.0.4.132 20.11.2019 SB2019040107
#VU22868 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-17565		 CWE-78 High
No
No
 1.0.4.132 20.11.2019 SB2019040107