CVE-2016-1518

The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.

• CWE-284

• http://packetstormsecurity.com/files/136280/Grandstream-Wave-1.0.1.26-Man-In-The-Middle.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/537818/100/0/threaded
• https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1518-insecure-provisioning.pdfThird Party Advisory
• http://packetstormsecurity.com/files/136280/Grandstream-Wave-1.0.1.26-Man-In-The-Middle.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/537818/100/0/threaded
• https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1518-insecure-provisioning.pdfThird Party Advisory

Published

Apr 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-15058Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P…8.6
• CVE-2016-1513The Impress tool in Apache OpenOffice 4.1.2 and earlier allo…
• CVE-2016-1514Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-1515Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-1516OpenCV 3.0.0 has a double free issue that allows attackers t…8.8
• CVE-2016-1517OpenCV 3.0.0 allows remote attackers to cause a denial of se…
• CVE-2016-1519The com.softphone.common package in the Grandstream Wave app…
• CVE-2016-1520The Grandstream Wave app 1.0.1.26 and earlier for Android do…
• CVE-2016-1521The directrun function in directmachine.cpp in Libgraphite i…
• CVE-2016-1522Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozi…
• CVE-2016-1523The SillMap::readFace function in FeatureMap.cpp in Libgraph…
• CVE-2016-1524Multiple unrestricted file upload vulnerabilities in NETGEAR…