PT-2021-21907 · Grandstream · Grandstream Ht801

Adam Simuntis + 1 · Published 2021-10-27 · Updated 2021-11-02 · CVE-2021-37915

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Grandstream HT801 Analog Telephone Adaptor versions prior to 1.0.29.8

Description: An issue was discovered in the Grandstream HT801 Analog Telephone Adaptor. From the limited configuration shell, it is possible to set the malicious gdb debug server variable. As a result, after a reboot, the device downloads and executes malicious scripts from an attacker-defined host.

Recommendations: For versions prior to 1.0.29.8, update to version 1.0.29.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the configuration shell to minimize the risk of exploitation. Avoid using the gdb debug server variable in the configuration until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2021-37915

Affected Products

Grandstream Ht801

References · 10

• 🔥 https://secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915 · Exploit
• http://grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/product/ht801 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37915 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37915 · Vendor Advisory
• https://t.me/cvenotify/22877 · Telegram Post
• https://t.me/rnetsec/15946 · Telegram Post
• https://t.me/pentestingnews/13033 · Telegram Post
• https://t.me/cybersecuritytechnologies/4614 · Telegram Post
• http://firmware.grandstream.com/BETA/Release_Note_HT80x_1.0.29.8.pdf · Note
• https://t.me/defcon_news/88847 · Telegram Post