PT-2019-11973 · Grandstream · Grandstream Gxv3611Ir Hd

Scarvell · Publicado 2019-03-30 · Atualizado 2023-03-01 · CVE-2019-10660

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Grandstream GXV3611IR HD version 1.0.3.23 and earlier

Description The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the "/goform/systemlog?cmd=set logserver" field. This is a remote code execution issue that can be exploited by authenticated users.

Recommendations For Grandstream GXV3611IR HD version 1.0.3.23 and earlier, update to version 1.0.3.23 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/goform/systemlog" API endpoint to minimize the risk of exploitation. Avoid using the logserver field in the affected API endpoint until the issue is resolved.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-10660

Produtos afetados

Grandstream Gxv3611Ir Hd

Referências · 4

• 🔥 https://github.com/scarvell/grandstream_exploits · Exploit
• https://trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10660 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-10660 · Aviso do Fabricante