CVE-2025-28170
HIGHGrandstream Networks GXP1628 <=1.0.4.130 - Info Disclosure
Title source: llmDescription
Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.
Scores
CVSS v3
7.6
EPSS
0.0008
EPSS Percentile
23.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Classification
CWE
CWE-548
Status
published
Affected Products (1)
grandstream/gxp1628_firmware
< 1.0.4.130
Timeline
Published
Jul 29, 2025
Tracked Since
Feb 18, 2026