CVE-2020-5723 | BDVDB-2026-133229 Detail

Grandstream UCM6200 series

Description#

The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-312 Cleartext Password Storage (CWE-312)

References#

https://www.tenable.com/security/research/tra-2020-17

Exploit#

No public exploit known

History#

Version 12020-03-30Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.