Approved changes feed: RSS · Atom
cpe:2.3:a:grandstream:gxp1628:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Grandstream (fb3509d2-60fb-591c-98b3-ccf7c0d07861) |
|---|---|
| Product | Gxp1628 (de3bcb77-e212-5aef-b6d7-62a1fd171ef3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2329 |
vulnerable | 2026-06-08 07:55:16.895686 |
Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow
An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability affects all six device models in the series: GXP1610, GXP1615, GXP1620, GXP1625, GXP1628, and GXP1630.
Published: 2026-02-18T14:08:09.272Z
Updated: 2026-02-18T14:50:51.252Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.