PT-2020-18677 · Grandstream · Grandstream Gwn7000

David Wells · Published 2020-07-17 · Updated 2020-07-22 · CVE-2020-5756

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Grandstream GWN7000 firmware version 1.0.9.4 and below

Description The issue allows authenticated remote users to modify the system's crontab via an undocumented API, enabling the execution of arbitrary OS commands on the router.

Recommendations For Grandstream GWN7000 firmware version 1.0.9.4 and below, update to a version above 1.0.9.4 to resolve the issue. As a temporary workaround, consider restricting access to the undocumented API until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-489

CWE-78

Related Identifiers

CVE-2020-5756

Affected Products

Grandstream Gwn7000

References · 4

• 🔥 https://tenable.com/cve/CVE-2020-5756 · Exploit
• https://osv.dev/vulnerability/CVE-2020-5756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5756 · Security Note
• https://tenable.com/security/research/tra-2020-41 · Note