Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-5760 | Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Un… | High (7.8) | 2020-07-29 | Environment Specific |
| CVE-2019-20033 | On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials ma… | Critical (9.8) | 2020-07-29 | Environment Specific |
| CVE-2019-20032 | An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PB… | Medium (6.5) | 2020-07-29 | Environment Specific |
| CVE-2019-20031 | NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite numbe… | Critical (9.1) | 2020-07-29 | Environment Specific |
| CVE-2019-20030 | An attacker with knowledge of the modem access number on a NEC UM8000 voicemail system may use SSH tunneling or standar… | High (7.8) | 2020-07-29 | Environment Specific |