← Database

CVE-2025-28171

MEDIUM CVSS: 6.5 Published: 2025-07-29 Modified: 2026-07-05

Description

An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /cgi and /webrtccgi.

Affected Platforms

Grandstream Ucm6510Grandstream Ucm6510 Firmware

Weakness Type

CWE-922

References