Remote Privilege Escalation Vulnerability in Grandstream GXP14XX
CVE-2023-50015

8.8HIGH

Key Information:

Vendor

Grandstream

Status
GXP14XX and GXP16XX
Vendor
CVE Published:
9 March 2024

What is CVE-2023-50015?

A security issue has been identified in Grandstream GXP14XX and GXP16XX products, allowing remote attackers to exploit a weakness in access control mechanisms. By leveraging a compromised end-user session-identity token, attackers can escalate their privileges, potentially gaining unauthorized access to sensitive information or functionalities within the affected devices. Users are advised to apply relevant security updates and monitor their systems for any unusual activity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/n0obit4/Vulnerability_Disclosure/tree/...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.