CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2020-5759
Severity
CRITICAL
CVSS
9.8
EPSS
3.20%
Original NVD Description
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a specially crafted "unset" command.
Related CVEs
Other vulnerabilities affecting the same vendor(s)