Description
Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Grandstream HT800 Series | Versions 1.0.17.5 and below | — |