Skip to content
OpenAdvisories

Vendor

Grandstream

8 known vulnerabilities.

Products

Grandstream GSD3710 2 GXP1625 2 UCM Series 1 Wave 1 GXP1610 1 GXP1615 1 GXP1620 1 GXP1628 1 GXP1630 1 GXP2135 1 GWN7660ELR 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2025-40979

    DLL search order hijack in Wave by Grandstream Networks

    DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users<user>\AppDat…

    Grandstream Wave
  • High 8.1
    CVE-2024-32937 EPSS 27%

    An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9…

    Grandstream GXP2135
  • High 8.8
    CVE-2024-0840

    Grandstream UCM Series IP PBX HTTP Parameter Injection

    The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may …

    Grandstream UCM Series