Permissions, Privileges, and Access Controls in Grandstream Networks, Inc. products - CVE-2018-17564
Published: November 20, 2019
Vulnerability identifier: #VU22869
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-17564
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to the "/app/war/cgi-bin/delete_CA" haserl script does not require authentication and permits to delete a previously uploaded CA certificate. A remote attacker can delete configuration parameters and gain admin access to the device.
Affected software
GXP1615
GXP1620
GXP1625
GXP1628
GXP1630
GXP1610
Grandstream Basic IP Phones firmware
GXP1620
GXP1625
GXP1628
GXP1630
GXP1610
Grandstream Basic IP Phones firmware
How to mitigate CVE-2018-17564
Install updates from vendor's website.
Grandstream Basic IP Phones firmware - update to 1.0.4.132