How many Grandstream ucm6208 firmware CVEs are in CISA KEV?

None of Grandstream ucm6208 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Grandstream ucm6208 firmware are affected?

5 distinct Grandstream ucm6208 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Grandstream ucm6208 firmware CVEs?

Grandstream ucm6208 firmware's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-141 (Improper Neutralization of Parameter/Argument Delimiters), CWE-312 (Cleartext Storage of Sensitive Information).

How many critical Grandstream ucm6208 firmware vulnerabilities are there?

Grandstream ucm6208 firmware has 3 critical and 4 high-severity CVEs.

What is the average severity of Grandstream ucm6208 firmware CVEs?

The average CVSS base score across Grandstream ucm6208 firmware's scored CVEs is 8.5.

RadicalNotion.AI

Log in Start free

Grandstream

8 CVEs

Grandstream ucm6208 firmware Vulnerabilities

Name: Grandstream ucm6208 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ucm6208 firmware by Grandstream.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

8.5

Avg CVSS

2020–2024

Last updated April 29, 2024

Overview

Grandstream ucm6208 firmware has 8 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Grandstream ucm6208 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include ucm6208.

Severity and exploitation

How the CVSS severity of Grandstream ucm6208 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Grandstream ucm6208 firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of Grandstream ucm6208 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Grandstream ucm6208 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.0.20.224 CVEs
<= 1.0.20.233 CVEs
< 1.0.20.521 CVE

Fixed in

1.0.20.224 CVEs
1.0.20.521 CVE

Find a version

8 CVEs

Sort

High vulnerability · 2024-04-29
CVE-2024-0840
Patch
CWE-141
High · CVSS 8.8
EPSS 0.9% (57th pct)2024-04-29
Critical vulnerability · 2020-07-17
CVE-2020-5759CWE-78
Critical · CVSS 9.8
EPSS 3.2% (87th pct)2020-07-17
High vulnerability · 2020-07-17
CVE-2020-5758CWE-78
High · CVSS 8.8
EPSS 4.4% (91th pct)2020-07-17
Critical vulnerability · 2020-07-17
CVE-2020-5757CWE-78
Critical · CVSS 9.8
EPSS 6.9% (94th pct)2020-07-17
High vulnerability · 2020-03-30
CVE-2020-5726
Public exploit
Patch
CWE-89
High · CVSS 7.5
EPSS 4.3% (91th pct)2020-03-30
Medium vulnerability · 2020-03-30
CVE-2020-5725
Public exploit
Patch
CWE-89
Medium · CVSS 5.9
EPSS 1.8% (76th pct)2020-03-30
High vulnerability · 2020-03-30
CVE-2020-5724
Public exploit
Patch
CWE-89
High · CVSS 7.5
EPSS 12.2% (96th pct)2020-03-30
Critical vulnerability · 2020-03-30
CVE-2020-5723
Public exploit
Patch
CWE-312
Critical · CVSS 9.8
EPSS 5.9% (93th pct)2020-03-30

Common weakness types

The CWE weakness categories most often found in Grandstream ucm6208 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Grandstream ucm6208 firmware CVEs were published each year.

2020

7

2024

1

Other Grandstream products

Browse vulnerabilities for other products by Grandstream.

ucm6204 firmware10 CVEs ucm62049 CVEs gxp1628 firmware8 CVEs ucm62028 CVEs ucm6202 firmware8 CVEs gxp1610 firmware7 CVEs gxp1615 firmware7 CVEs gxp1620 firmware7 CVEs

All Grandstream vulnerabilities

Frequently asked questions

Common questions about Grandstream ucm6208 firmware vulnerabilities.

How many CVEs does Grandstream ucm6208 firmware have?: Grandstream ucm6208 firmware has 8 published CVE records since 2020.
How many Grandstream ucm6208 firmware CVEs are in CISA KEV?: None of Grandstream ucm6208 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grandstream ucm6208 firmware vulnerabilities?: Yes — 4 of Grandstream ucm6208 firmware's CVEs have a known public exploit.
Which versions of Grandstream ucm6208 firmware are affected?: 5 distinct Grandstream ucm6208 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grandstream ucm6208 firmware CVEs?: Grandstream ucm6208 firmware's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-141 (Improper Neutralization of Parameter/Argument Delimiters), CWE-312 (Cleartext Storage of Sensitive Information).
How many critical Grandstream ucm6208 firmware vulnerabilities are there?: Grandstream ucm6208 firmware has 3 critical and 4 high-severity CVEs.
What is the average severity of Grandstream ucm6208 firmware CVEs?: The average CVSS base score across Grandstream ucm6208 firmware's scored CVEs is 8.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Grandstream ucm6208 firmware vulnerabilities

Monitor new Grandstream ucm6208 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing