gwn7000_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/gwn7000_firmware/ Sun, 26 Feb 2023 06:42:26 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png gwn7000_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/gwn7000_firmware/ 32 32 CVE-2020-5756 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5756/ Sun, 26 Feb 2023 06:42:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5756/ Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system’s crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.

The post CVE-2020-5756 appeared first on CVE Vulnerability.

]]> Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system’s crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.

The post CVE-2020-5756 appeared first on CVE Vulnerability.

]]> CVE-2019-10656 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10656/ Sun, 26 Feb 2023 06:29:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10656/ Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call.

The post CVE-2019-10656 appeared first on CVE Vulnerability.

]]> Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call.

The post CVE-2019-10656 appeared first on CVE Vulnerability.

]]>