- Vendor / Project
- Grandstream
- Product
- UCM6200
- Date added
- Jan 28, 2022
- Due date
- Jul 28, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-89
Description
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
Required action
Apply updates per vendor instructions.