CVE-2020-25218

CRITICAL

Grandstream Grp2612 Firmware - Missing Authentication

Title source: rule
STIX 2.1

Description

Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0030
EPSS Percentile 52.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-306
Status published
Products (7)
grandstream/grp2612_firmware 1.0.3.6
grandstream/grp2612p_firmware 1.0.3.6
grandstream/grp2612w_firmware 1.0.3.6
grandstream/grp2613_firmware 1.0.3.6
grandstream/grp2614_firmware 1.0.3.6
grandstream/grp2615_firmware 1.0.3.6
grandstream/grp2616_firmware 1.0.3.6
Published Mar 29, 2021
Tracked Since Feb 18, 2026