Grandstream Networks UCM6200 Series SQL Injection Vulnerability
Grandstream · UCM6200
Date added (CISA)
2022-01-28
Remediation due
2022-07-28
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.