CVE:CVE-2013-3542
CNNVD:CNNVD-201306-261
Grandstream GXV3501等都是美国潮流网络（Grandstream）公司的一款IP电话。
多款Grandstream产品中存在信任管理问题漏洞。攻击者可利用这些漏洞绕过特定的安全限制进而执行未授权操作。以下产品及版本受到影响：Grandstream GXV3501；GXV3504；GXV3601；GXV3601HD/LL；GXV3611HD/LL；GXV3615W/P；GXV3651FHD；GXV3662HD；GXV3615WP_HD；GXV3500；使用1.0.4.11版本固件的其他产品。
solution:Upgrade grandstream gxv3501_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3504_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3601_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3601hd_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3601ll_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3611hd_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3611ll_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3615w_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3615p_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3651fhd_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3662hd_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3615wp_hd_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11; Upgrade grandstream gxv3500_firmware to a higher version than 1.0.4.11,and avoid the version 1.0.4.11