https://www.tenable.com/security/research/tra-2020-15

http://packetstormsecurity.com/files/156876/UCM6202-1.0.18.13-Remote-Command-Injection.html

http://packetstormsecurity.com/files/165708/Grandstream-UCM62xx-IP-PBX-sendPasswordEmail-Remote-Code-Execution.html

A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
160532	Grandstream Networks UCM6200 Series SQLi (SIP)	Nessus	Misc.	critical
160531	Grandstream Networks UCM6200 Series SQLi (Web UI)	Nessus	Misc.	critical
160530	Grandstream Networks UCM6200 Series SQLi (Phone Web UI)	Nessus	Misc.	critical

CVE-2020-5722

critical

Tenable Plugins

critical

critical

critical