description: Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command.
problem types: CWE-78
affected:
{
product: Grandstream UCM6200 Series
vendor: n/a
versions:
status: affected, version: Versions 1.0.20.23 and below
}