CVE:CVE-2020-25218
CNNVD:CNNVD-202103-1623
Grandstream GRP261x VoIP phone是美国Grandstream公司的一个IP电话。用于大规模部署而设计的电信级IP电话。
Grandstream GRP261x VoIP phone 1.0.3.6 版本存在访问控制错误漏洞，该漏洞允许认证旁路在其管理web界面。
solution:Upgrade grandstream grp2612_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2612p_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2612w_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2613_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2614_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2615_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6; Upgrade grandstream grp2616_firmware to a higher version than 1.0.3.6,and avoid the version 1.0.3.6