VULNERABILITY INTELLIGENCE

CVE-2020-25217

CVSS score9 HIGH

EPSS probability2.38%

CISA KEVNot currently listed

Published2021-03-29

Last modified2026-06-17

Description

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.