Description
Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Grandstream GXP1600 Series | 1.0.4.152 and below | — |