CVE-2019-10655

Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow (via the phonecookie cookie) to overwrite a data structure and consequently bypass authentication. This can be exploited remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd.

• CWE-78
• CWE-119
• CWE-352

• http://packetstormsecurity.com/files/165643/Grandstream-GXV3175-Unauthenticated-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/165931/Grandstream-GXV31XX-settimezone-Unauthenticated-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/scarvell/grandstream_exploitsExploit, Third Party Advisory
• https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1Third Party Advisory
• http://packetstormsecurity.com/files/165643/Grandstream-GXV3175-Unauthenticated-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/165931/Grandstream-GXV31XX-settimezone-Unauthenticated-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/scarvell/grandstream_exploitsExploit, Third Party Advisory
• https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1Third Party Advisory

Published

Mar 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1065An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2019-10650In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer ov…
• CVE-2019-10651An issue was discovered in the Core Server in Ivanti Endpoin…
• CVE-2019-10652An issue was discovered in flatCore 1.4.7. acp/acp.php allow…
• CVE-2019-10653An issue was discovered in Hsycms V1.1. There is a SQL injec…
• CVE-2019-10654The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, a…
• CVE-2019-10656Grandstream GWN7000 before 1.0.6.32 devices allow remote aut…8.8
• CVE-2019-10657Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8…6.5
• CVE-2019-10658Grandstream GWN7610 before 1.0.8.18 devices allow remote aut…8.8
• CVE-2019-10659Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6…8.8
• CVE-2019-1066Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-10660Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remot…8.8