Grandstream GXP2135 Os Command Injection Vulnerability

CVE-2024-32937

What is CVE-2024-32937?

An OS command injection vulnerability has been identified in the CWMP SelfDefinedTimeZone functionality of the Grandstream GXP2135. This issue allows attackers to send specially crafted network packets, which could lead to arbitrary command execution on the affected devices. Successful exploitation of this vulnerability could enable unauthorized access to system functions and potentially lead to further security issues. Users of the affected versions should apply necessary mitigations to prevent exploitation.

References