9.8

CVE-2026-2329

Exploit
An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Grandstream ≫ Gxp1610 Firmware Version < 1.0.7.81
   Grandstream ≫ Gxp1610 Version-
Grandstream ≫ Gxp1615 Firmware Version < 1.0.7.81
   Grandstream ≫ Gxp1615 Version-
Grandstream ≫ Gxp1620 Firmware Version < 1.0.7.81
   Grandstream ≫ Gxp1620 Version-
Grandstream ≫ Gxp1625 Firmware Version < 1.0.7.81
   Grandstream ≫ Gxp1625 Version-
Grandstream ≫ Gxp1628 Firmware Version < 1.0.7.81
   Grandstream ≫ Gxp1628 Version-
Grandstream ≫ Gxp1630 Firmware Version < 1.0.7.81
   Grandstream ≫ Gxp1630 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 41.14% 0.973
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cve@rapid7.com 9.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).