Description
Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt.
Scores
CVSS v3
8.8
EPSS
0.0162
EPSS Percentile
81.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-489
CWE-326
Status
published
Products (6)
grandstream/ht801_firmware
< 1.0.17.5
grandstream/ht802_firmware
< 1.0.17.5
grandstream/ht812_firmware
< 1.0.17.5
grandstream/ht813_firmware
< 1.0.17.5
grandstream/ht814_firmware
< 1.0.17.5
grandstream/ht818_firmware
< 1.0.17.5
Published
Jul 29, 2020
Tracked Since
Feb 18, 2026