← Database

CVE-2025-28170

HIGH CVSS: 7.6 Published: 2025-07-29 Modified: 2026-07-05

Description

Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.

Affected Platforms

Grandstream Gxp1628Grandstream Gxp1628 Firmware

Weakness Type

CWE-548

References