Ucm6510 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:a:grandstream:ucm6510_firmware:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Grandstream (fb3509d2-60fb-591c-98b3-ccf7c0d07861) |
|---|---|
| Product | Ucm6510 Firmware (7c306393-6c6f-5a7b-82e9-9f15265a1a9d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0840 |
vulnerable | 2026-06-08 06:22:02.966530 |
Grandstream UCM Series IP PBX HTTP Parameter Injection
HIGH (8.8)
The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and password. Affected models are the UCM6202, UCM6204, UCM6208, and UCM6510.
Published: 2024-04-29T18:42:57.112Z
Updated: 2024-08-01T18:18:18.719Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.