CVE-2019-10655
Critical
Description
Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow (via the phonecookie cookie) to overwrite a data structure and consequently bypass authentication. This can be exploited remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd.
SeverityCritical
CVSS9.8
Exploit probability—
ProductGrandstream Gac2500 Firmware
PublishedMar 30, 2019
First seenMar 30, 2019
How to fix
Update
- grandstream gvc3202_firmware1.0.3.51 or later
- grandstream gxv3275_firmware1.0.3.219 or later
- grandstream gxv3240_firmware1.0.3.219 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grandstream gac2500_firmware | v ≤ 1.0.3.35 | — |
| grandstream gvc3202_firmware | v < 1.0.3.51 | 1.0.3.51 |
| grandstream gxv3275_firmware | v < 1.0.3.219 | 1.0.3.219 |
| grandstream gxv3240_firmware | v < 1.0.3.219 | 1.0.3.219 |
| grandstream gxp2200_firmware | v ≤ 1.0.3.27 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.