Vulnerability in Grandstream HT801 Analog Telephone Adaptor
CVE-2021-37915
Key Information:
- Vendor
Grandstream
- Status
- Vendor
- CVE Published:
- 28 October 2021
Badges
What is CVE-2021-37915?
A security issue in the Grandstream HT801 Analog Telephone Adaptor allows attackers to manipulate the device's limited configuration shell. By setting the malicious 'gdb_debug_server' variable, an attacker can cause the device to download and execute harmful scripts from a host of their choosing upon rebooting the device. This vulnerability poses significant risks for network security, especially in environments where the HT801 is deployed without adequate protection measures. Users are urged to update their devices to version 1.0.29.8 or later to mitigate this risk.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.