Description
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Grandstream UCM6200 Series | n/a / Grandstream UCM6200 Series | Before 1.0.20.17 | affected |