cnvd - cnvd-2020-44351

CNVD-2020-44351

Vulnerability from cnvd - Published: 2020-08-05

Title

Grandstream UCM6200系列OS命令注入漏洞（CNVD-2020-44351）

Description

Grandstream UCM6200是美国潮流网络（Grandstream）公司的一套用于IP电话通信的企业级交换机。 Grandstream UCM6200系列 1.0.20.23及更早版本存在OS命令注入漏洞。远程认证攻击者可通过将特制HTTP POST发送到UCM的“新” HTTPS API利用该漏洞以root用户身份执行命令。

Severity

高

Formal description

厂商尚未提供漏洞修复方案，请关注厂商主页更新： http://www.grandstream.com/products/ip-pbxs/ucm-series-ip-pbxs/product/ucm6200-series

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-5757

Impacted products

Name
Grandstream Grandstream UCM6200系列 <=1.0.20.23

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-5757",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-5757"
    }
  },
  "description": "Grandstream UCM6200\u662f\u7f8e\u56fd\u6f6e\u6d41\u7f51\u7edc\uff08Grandstream\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u4e8eIP\u7535\u8bdd\u901a\u4fe1\u7684\u4f01\u4e1a\u7ea7\u4ea4\u6362\u673a\u3002\n\nGrandstream UCM6200\u7cfb\u5217 1.0.20.23\u53ca\u66f4\u65e9\u7248\u672c\u5b58\u5728OS\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u8ba4\u8bc1\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5c06\u7279\u5236HTTP POST\u53d1\u9001\u5230UCM\u7684\u201c\u65b0\u201d HTTPS API\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5root\u7528\u6237\u8eab\u4efd\u6267\u884c\u547d\u4ee4\u3002",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttp://www.grandstream.com/products/ip-pbxs/ucm-series-ip-pbxs/product/ucm6200-series",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-44351",
  "openTime": "2020-08-05",
  "products": {
    "product": "Grandstream Grandstream UCM6200\u7cfb\u5217 \u003c=1.0.20.23"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-5757",
  "serverity": "\u9ad8",
  "submitTime": "2020-07-21",
  "title": "Grandstream UCM6200\u7cfb\u5217OS\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2020-44351\uff09"
}

CVE-2020-5757 (GCVE-0-2020-5757)

Vulnerability from cvelistv5 – Published: 2020-07-17 20:35 – Updated: 2024-08-04 08:39

Summary

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API.

Severity ?

No CVSS data available.

CWE

CWE-78

Assigner

tenable

References

URL

Tags

https://www.tenable.com/security/research/tra-2020-42

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Grandstream UCM6200 Series	Affected: Versions 1.0.20.23 and below

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T08:39:25.872Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/research/tra-2020-42"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Grandstream UCM6200 Series",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Versions 1.0.20.23 and below"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM\u0027s \"New\" HTTPS API."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-17T20:35:44",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.tenable.com/security/research/tra-2020-42"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vulnreport@tenable.com",
          "ID": "CVE-2020-5757",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Grandstream UCM6200 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Versions 1.0.20.23 and below"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM\u0027s \"New\" HTTPS API."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-78"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.tenable.com/security/research/tra-2020-42",
              "refsource": "CONFIRM",
              "url": "https://www.tenable.com/security/research/tra-2020-42"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2020-5757",
    "datePublished": "2020-07-17T20:35:44",
    "dateReserved": "2020-01-06T00:00:00",
    "dateUpdated": "2024-08-04T08:39:25.872Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-44351

CVE-2020-5757 (GCVE-0-2020-5757)

Tags

Sightings

Nomenclature