CVE:CVE-2020-25217
CNNVD:CNNVD-202103-1612
Grandstream GRP261x VoIP phone是美国Grandstream公司的一个IP电话。用于大规模部署而设计的电信级IP电话。
Grandstream GRP261x VoIP phone running firmware 存在命令注入漏洞，该漏洞允许命令注入在其管理web界面。
solution:Upgrade grandstream grp2612_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2612p_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2612w_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2613_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2614_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2615_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2616_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6