CVE-2020-5760

Name: CVE-2020-5760
Creator: NVD / NIST
Published: 2020-07-29T19:15:14.967+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.8/10EPSS 5.47%

Last modified Jun 17, 2026

CVE-2020-5760 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.. EPSS estimates a 5.47% chance of exploitation in the next 30 days.

Description

Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote attackers can execute arbitrary commands as root by crafting a special configuration file and sending a crafted SIP message.

Metrics

CVSS 3.1

7.8/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Probability

5.47%

91.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Grandstream	Ht801 Firmware	<= 1.0.17.5
Grandstream	Ht802 Firmware	<= 1.0.17.5
Grandstream	Ht812 Firmware	<= 1.0.17.5
Grandstream	Ht814 Firmware	<= 1.0.17.5
Grandstream	Ht818 Firmware	<= 1.0.17.5
Grandstream	Ht813 Firmware	<= 1.0.17.5

References

https://www.tenable.com/security/research/tra-2020-43Exploit, Third Party Advisory
https://www.tenable.com/security/research/tra-2020-47Third Party Advisory, VDB Entry
https://www.tenable.com/security/research/tra-2020-43Exploit, Third Party Advisory
https://www.tenable.com/security/research/tra-2020-47Third Party Advisory, VDB Entry

Timeline

Published: Jul 29, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-5760?

How severe is CVE-2020-5760?

CVE-2020-5760 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 5.47% probability of exploitation in the next 30 days.

How do I fix CVE-2020-5760?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-5760?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST