description: The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.
problem types: Cleartext Password Storage (CWE-312)
affected:
{
product: Grandstream UCM6200 series
vendor: n/a
versions:
status: affected, version: 1.0.20.20 and below
}