Log in Start free

Actively exploited · Published Mar 23, 2020 · Assigned by tenable

CVE-2020-5722

Critical 9.8 Exploited

In plain English

A critical-severity SQL injection in Grandstream UCM6200 Series. Attackers are actively exploiting it in the wild (listed by CISA on January 28, 2022). The chance it is exploited in the next 30 days is estimated at 84.3% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei. Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)84.3%top 0.3% of all CVEs
Exploited in the wildYesCISA KEV since Jan 28, 2022
Attack tooling2Metasploit, Nuclei

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Jul 28, 2022.

Official description

The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.

Affected products (as reported)

VendorProductVersions
n/a Grandstream UCM6200 Series Before 1.0.20.17

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References