Grandstream vulnerabilities

Products

• Ucm6204 Firmware 10
• Gxp1628 Firmware 8
• Ucm6202 Firmware 8
• Ucm6208 Firmware 8
• Gxp1610 Firmware 7
• Gxp1615 Firmware 7
• Gxp1620 Firmware 7
• Gxp1625 Firmware 7
• Gxp1630 Firmware 7
• Ht802 Firmware 7
• Ht801 Firmware 6
• Ht812 Firmware 4
• Ht813 Firmware 4
• Ht814 Firmware 4
• Ht818 Firmware 4
• Gwn7000 Firmware 3
• Ucm6510 Firmware 3
• Wave 3
• Gds3710 Firmware 2
• Gsd3710 2
• Grp2612 Firmware 2
• Grp2612p Firmware 2
• Grp2612w Firmware 2
• Grp2613 Firmware 2
• Grp2614 Firmware 2
• Grp2615 Firmware 2
• Grp2616 Firmware 2
• Gwn7610 Firmware 2
• Gxp1625 2
• Gxv3500 2
• Gxv3501 2
• Gxv3504 2
• Gxv3601 2
• Gxv3601hd\/ll 2
• Gxv3611hd\/ll 2
• Gxv3611ir Hd Firmware 2
• Gxv3615w\/p 2
• Gxv3615wp Hd 2
• Gxv3651fhd 2
• Gxv3662hd 2
• Gxv Device Firmware 2
• Ht488 2

Newest

• grandstream gxp1610, gxp1615, gxp1620 +9 more +11 more Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow CVE-2026-2329 Public exploit EPSS 41.7% 9.3 CriticalFebruary 18, 2026
• grandstream gxp1625 Grandstream GXP1625 Network Status api.values.post cross site scripting CVE-2025-14186 5.1 MediumDecember 7, 2025
• grandstream ucm6510 firmware Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of... CVE-2025-28172 6.5 MediumJuly 29, 2025
• grandstream ucm6510 firmware An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain... CVE-2025-28171 6.5 MediumJuly 29, 2025
• grandstream gxp1628 firmware Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is... CVE-2025-28170 7.6 HighJuly 29, 2025
• grandstream gxp2135, gxp2135 firmware +1 more An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of... CVE-2024-32937 EPSS 27.0% 8.1 HighJuly 3, 2024
• grandstream ucm series, ucm6202 firmware, ucm6204 firmware +2 more +4 more Grandstream UCM Series IP PBX HTTP Parameter Injection CVE-2024-0840 8.8 HighApril 29, 2024
• grandstream gxp1400 firmware, gxp1405 firmware, gxp1610 firmware +5 more +7 more An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote... CVE-2023-50015 8.8 HighMarch 9, 2024
• grandstream gsd3710, gds3710 firmware +1 more Grandstream GSD3710 Stack-based Buffer Overflow CVE-2022-2070 Public exploit 9.8 CriticalSeptember 23, 2022
• grandstream gsd3710, gds3710 firmware +1 more Grandstream GSD3710 Stack-based Buffer Overflow CVE-2022-2025 Public exploit 9.8 CriticalSeptember 23, 2022
• grandstream ht801 firmware An issue was discovered on the Grandstream HT801 Analog Telephone Adaptor before 1.0.29.8. From... CVE-2021-37915 8.8 HighOctober 28, 2021
• grandstream ht801 firmware Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream... CVE-2021-37748 Public exploit 8.8 HighOctober 28, 2021
• grandstream grp2612 firmware, grp2612p firmware, grp2612w firmware +4 more +6 more Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection... CVE-2020-25217 7.2 HighMarch 29, 2021
• grandstream grp2612 firmware, grp2612p firmware, grp2612w firmware +4 more +6 more Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication... CVE-2020-25218 9.8 CriticalMarch 29, 2021
• grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 more Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH... CVE-2020-5763 8.8 HighJuly 29, 2020
• grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 more Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to a denial of service... CVE-2020-5762 7.5 HighJuly 29, 2020
• grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 more Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due... CVE-2020-5761 7.5 HighJuly 29, 2020
• grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 more Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command... CVE-2020-5760 7.8 HighJuly 29, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command... CVE-2020-5759 9.8 CriticalJuly 17, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command... CVE-2020-5758 8.8 HighJuly 17, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command... CVE-2020-5757 9.8 CriticalJuly 17, 2020
• grandstream gwn7000 firmware, tenable grandstream gwn7000 +1 more Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to... CVE-2020-5756 8.8 HighJuly 17, 2020
• grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 more Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote... CVE-2020-5739 8.8 HighApril 14, 2020
• grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 more Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote... CVE-2020-5738 8.8 HighApril 14, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI... CVE-2020-5726 Public exploit 7.5 HighMarch 30, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP... CVE-2020-5725 5.9 MediumMarch 30, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP... CVE-2020-5724 EPSS 12.2% 7.5 HighMarch 30, 2020
• grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 more The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database.... CVE-2020-5723 9.8 CriticalMarch 30, 2020
• grandstream ucm6200, ucm6200 firmware +1 more The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote... CVE-2020-5722 In KEVPublic exploit EPSS 84.3% 9.8 CriticalMarch 23, 2020
• grandstream gxv3500 firmware, gxv3501 firmware, gxv3504 firmware +10 more +12 more Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD,... CVE-2013-3542 10.0 CriticalDecember 11, 2019
• grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 more Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0... CVE-2018-17565 9.8 CriticalApril 1, 2019
• grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 more A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones... CVE-2018-17564 9.8 CriticalApril 1, 2019
• grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 more A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128... CVE-2018-17563 5.3 MediumApril 1, 2019
• grandstream ucm6204 firmware Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL... CVE-2019-10663 EPSS 27.9% 8.8 HighMarch 30, 2019
• grandstream ucm6204 firmware Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute... CVE-2019-10662 EPSS 43.9% 8.8 HighMarch 30, 2019
• grandstream gxv3611ir hd firmware On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password. CVE-2019-10661 9.8 CriticalMarch 30, 2019
• grandstream gxv3611ir hd firmware Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute... CVE-2019-10660 8.8 HighMarch 30, 2019
• grandstream gxv3370 firmware, wp820 firmware +1 more Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated... CVE-2019-10659 8.8 HighMarch 30, 2019
• grandstream gwn7610 firmware Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary... CVE-2019-10658 8.8 HighMarch 30, 2019
• grandstream gwn7000 firmware, gwn7610 firmware +1 more Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote... CVE-2019-10657 6.5 MediumMarch 30, 2019
• grandstream gwn7000 firmware Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary... CVE-2019-10656 8.8 HighMarch 30, 2019
• grandstream gac2500 firmware, gvc3202 firmware, gxp2200 firmware +2 more +4 more Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta,... CVE-2019-10655 Public exploit EPSS 15.5% 9.8 CriticalMarch 30, 2019
• grandstream ht802 firmware Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows... CVE-2017-16565 8.8 HighNovember 6, 2017
• grandstream ht802 firmware Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802... CVE-2017-16564 5.4 MediumNovember 6, 2017
• grandstream ht802 firmware Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802... CVE-2017-16563 8.0 HighNovember 6, 2017
• grandstream wave The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving... CVE-2016-1520 7.8 HighApril 21, 2017
• grandstream wave The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android... CVE-2016-1519 5.9 MediumApril 21, 2017
• grandstream wave The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and... CVE-2016-1518 8.1 HighApril 21, 2017
• grandstream gxv3611 hd firmware SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9... CVE-2015-2866 Public exploit 7.5 HighJuly 8, 2015
• grandstream gxv3500, gxv3501, gxv3504 +8 more +10 more Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501,... CVE-2013-3963 Public exploit 6.8 MediumOctober 1, 2013
• Show olderLoading…