PatchSiren

Grandstream CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Known exploited Grandstream CVE published 2022-01-28

CVE-2020-5722

CVE-2020-5722 is a SQL injection vulnerability affecting Grandstream UCM6200 series devices. In the supplied public records, CISA added the issue to its Known Exploited Vulnerabilities catalog on 2022-01-28 and set a remediation due date of 2022-07-28, indicating this is a vulnerability that should be treated as urgently actionable. The supplied corpus does not include a CVSS score, so prioritization here [truncated]