THREATPORT/VULNERABILITY/CVE-2019-10655
CRITICAL SEVERITY

CVE-2019-10655

Gac2500 Firmware vulnerability

CVSS
9.8
EPSS
15.4%
EPSS pct
96th
Exploited
No known
Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow (via the phonecookie cookie) to overwrite a data structure and consequently bypass authentication. This can be exploited remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd.
Affected vendor
Grandstream
Affected product
Gac2500 Firmware
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)
  • CWE-78 — OS Command Injection
  • CWE-119 — Improper Restriction of Operations within Memory Bounds
  • CWE-352 — Cross-Site Request Forgery (CSRF)
Published
2019-03-30

Risk analysis

Based on its CVSS vector, this vulnerability is exploitable over the network, low attack complexity, requiring no privileges, no user interaction. Successful exploitation leads to high impact to confidentiality, high impact to integrity, high impact to availability.

Its EPSS score of 15.4% reflects a moderate probability of exploitation activity in the wild over the next 30 days, placing it above 96% of all scored CVEs.

Check your external exposure to CVE-2019-10655

  • Confirm whether Grandstream Gac2500 Firmware is running on any internet-facing host or subdomain.
  • Match discovered service fingerprints against the version affected by CVE-2019-10655.
  • Prioritise remediation if the asset is public, business-critical, or near authentication/payment flows.

How ThreatPort helps with CVE-2019-10655

ThreatPort's external attack surface scanner checks your internet-facing assets — agentlessly, from the outside in — for the exposed services and versions that CVE-2019-10655 affects, then prioritises the finding by real risk using CISA KEV and FIRST.org EPSS.

Run a free external exposure scan

Are you exposed to CVE-2019-10655?

Run an instant, non-intrusive external scan to check your attack surface for CVE-2019-10655.

Start free scan

No credit card. Agentless.

Related vulnerabilities

CRITICAL
CVE-2019-7763
Acrobat Dc vulnerability
CRITICAL
CVE-2019-7764
Acrobat Dc vulnerability
CRITICAL
CVE-2019-7765
Acrobat Dc vulnerability