Description
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 28 Jul 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.