← CVE Intelligence

CVE-2020-5724

n/a / Grandstream UCM6200 series PUBLISHED

Description (CNA)

The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.

Affected (CNA)

Vendor / productVersions
n/a / Grandstream UCM6200 seriesaffected 1.0.20.20 and below

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.