description: Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.
problem types: CWE-78
affected:
{
product: Grandstream HT800 Series
vendor: n/a
versions:
status: affected, version: Versions 1.0.17.5 and below
}