Input Validation Issue in Grandstream VoIP Phones
CVE-2018-17563
5.3MEDIUM
What is CVE-2018-17563?
A vulnerability exists in Grandstream GXP16xx VoIP phones that allows attackers to exploit malformed input strings sent to the /cgi-bin/api-get_line_status endpoint. This flaw enables unauthorized access to the device's configuration settings, which can be retrieved in cleartext, posing significant security risks.