VULNERABILITY INTELLIGENCE

CVE-2020-5738

CVSS score9 HIGH

EPSS probability5.42%

CISA KEVNot currently listed

Published2020-04-14

Last modified2026-06-17

Description

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface.