Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a crafted manage_if setting, thus bypassing the intended restrictions of this shell and taking full control of the device. There are default weak credentials that can be used to authenticate.
References
| Link | Resource |
|---|---|
| http://www.grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/product/ht801 | Product Vendor Advisory |
| https://github.com/SECFORCE/CVE-2021-37748 | Third Party Advisory |
| https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/ | Exploit Third Party Advisory |
| http://www.grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/product/ht801 | Product Vendor Advisory |
| https://github.com/SECFORCE/CVE-2021-37748 | Third Party Advisory |
| https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.grandstream.com/products/gateways-and-atas/analog-telephone-adaptors/product/ht801 - Product, Vendor Advisory | |
| References | () https://github.com/SECFORCE/CVE-2021-37748 - Third Party Advisory | |
| References | () https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/ - Exploit, Third Party Advisory |
Information
Published : 2021-10-28 12:15
Updated : 2024-11-21 06:15
NVD link : CVE-2021-37748
Mitre link : CVE-2021-37748
CVE.ORG link : CVE-2021-37748
JSON object : View
Products Affected
grandstream
- ht801
- ht801_firmware
CWE
CWE-787
Out-of-bounds Write