Grandstream Gwn7000 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Grandstream Gwn7000 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-10656 — CVSS 8.8 (high): Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the…
• CVE-2020-5756 — CVSS 8.8 (high): Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented…
• CVE-2019-10657 — CVSS 6.5 (medium): Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a…