CVE:CVE-2020-5726
CNNVD:CNNVD-202003-1716
Grandstream UCM6200是美国潮流网络（Grandstream）公司的一套用于IP电话通信的企业级交换机。
Grandstream UCM6200系列1.0.20.22之前版本中存在SQL注入漏洞。远程攻击者可借助特制的用户名利用该漏洞获取用户密码。
solution:Upgrade grandstream ucm6202_firmware to a higher version than 1.0.20.22,and avoid the version (,1.0.20.22); Upgrade grandstream ucm6204_firmware to a higher version than 1.0.20.22,and avoid the version (,1.0.20.22); Upgrade grandstream ucm6208_firmware to a higher version than 1.0.20.22,and avoid the version (,1.0.20.22)