- How many CVEs does Grandstream have?
- Grandstream has 59 published CVE records since 2005, including 6 in the last two years.
- How many Grandstream CVEs are in CISA KEV?
- Yes — 1 of Grandstream's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Grandstream products have the most CVEs?
- The Grandstream products with the most published CVEs are ucm6204_firmware, ucm6204, gxp1628_firmware, UCM6202, ucm6202_firmware.
- What are the most common weakness types in Grandstream CVEs?
- Grandstream's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-121 (Stack-based Buffer Overflow), CWE-489 (Active Debug Code).
- Are there public exploits for Grandstream vulnerabilities?
- Yes — 31 of Grandstream's CVEs have a known public exploit.
- How many critical Grandstream vulnerabilities are there?
- Grandstream has 14 critical and 34 high-severity CVEs.
- What is the average severity of Grandstream CVEs?
- The average CVSS base score across Grandstream's scored CVEs is 8.1.