- How many CVEs does Grandstream have?
- Grandstream has 60 published CVE records since 2005, including 7 in the last two years.
- How many Grandstream CVEs are in CISA KEV?
- Yes — 1 of Grandstream's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Grandstream products have the most CVEs?
- The Grandstream products with the most published CVEs are ucm6204_firmware, ucm6204, gxp1628_firmware, UCM6202, ucm6202_firmware.
- What are the most common weakness types in Grandstream CVEs?
- Grandstream's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-121 (Stack-based Buffer Overflow).
- Are there public exploits for Grandstream vulnerabilities?
- Yes — 43 of Grandstream's CVEs have a known public exploit.
- How many critical Grandstream vulnerabilities are there?
- Grandstream has 14 critical and 34 high-severity CVEs.
- What is the average severity of Grandstream CVEs?
- The average CVSS base score across Grandstream's scored CVEs is 8.1.