VULNERABILITY INTELLIGENCE

CVE-2022-2025

CVSS score9.8 CRITICAL
EPSS probability5.45%
CISA KEVNot currently listed
Published2022-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute a shell with full access.

Weakness classification

  • CWE-121: Stack-based Buffer Overflow
  • CWE-787: Out-of-bounds Write

Primary references