Approved changes feed: RSS · Atom

cpe:2.3:a:grandstream:gxp1620:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGrandstream (fb3509d2-60fb-591c-98b3-ccf7c0d07861)
ProductGxp1620 (89c553ee-483c-5bf5-abd8-5baf2e05dc3e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2329 vulnerable 2026-06-08 07:55:16.894015 Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630.
Published: 2026-02-18T14:08:09.272Z
Updated: 2026-02-18T14:50:51.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.