← Back

CVE-2020-5763

nvd nist
Published: Jul 29, 2020Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Grandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH service. An authenticated remote attacker can obtain a root shell by correctly answering a challenge prompt.

Affected (6)

Grandstream
6 products
Ht801 Firmware
Ht802 Firmware
Ht812 Firmware
Ht814 Firmware
Ht818 Firmware
Ht813 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ht801 Firmware
Up to 1.0.17.5
Running on/withPlatform Versions
Grandstream
Ht801
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ht802 Firmware
Up to 1.0.17.5
Running on/withPlatform Versions
Grandstream
Ht802
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ht812 Firmware
Up to 1.0.17.5
Running on/withPlatform Versions
Grandstream
Ht812
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ht814 Firmware
Up to 1.0.17.5
Running on/withPlatform Versions
Grandstream
Ht814
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ht818 Firmware
Up to 1.0.17.5
Running on/withPlatform Versions
Grandstream
Ht818
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ht813 Firmware
Up to 1.0.17.5
Running on/withPlatform Versions
Grandstream
Ht813
All versions

Related CWEs

CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
CWE-489
Active Debug Code
The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (4)

Source: vulnreport@tenable.com
ExploitThird Party Advisory
Source: vulnreport@tenable.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.