Approved changes feed: RSS · Atom

cpe:2.3:h:grandstream:gwn7610:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorGrandstream (fb3509d2-60fb-591c-98b3-ccf7c0d07861)
ProductGwn7610 (b684cbae-8055-593e-86c9-85a6f934dbea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10658 not_vulnerable 2026-06-08 05:12:24.875955 Details available
Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/controller.icc.update_nds_webroot_from_tmp update_nds_webroot_from_tmp API call.
Published: 2019-03-30T16:42:54.000Z
Updated: 2024-08-04T22:32:00.693Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10657 not_vulnerable 2026-06-08 05:12:24.875468 Details available
Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request.
Published: 2019-03-30T16:42:42.000Z
Updated: 2024-08-04T22:32:00.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.