Skip to content
OpenAdvisories

Vendor

Grandstream

6 known vulnerabilities.

Products

Grandstream GSD3710 2 GXP1625 2 UCM Series 1 GXP1610 1 GXP1615 1 GXP1620 1 GXP1628 1 GXP1630 1 GXP2135 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-2329 Public exploit EPSS 42%

    Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow

    An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target dev…

    Grandstream GXP1625 GXP1615 GXP1630
  • Critical 9.8
    CVE-2022-2070 Public exploit

    Grandstream GSD3710 Stack-based Buffer Overflow

    In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a…

    Grandstream Grandstream GSD3710
  • Critical 9.8
    CVE-2022-2025 Public exploit

    Grandstream GSD3710 Stack-based Buffer Overflow

    an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute…

    Grandstream Grandstream GSD3710