{"cvss":0.0,"datePublished":"2020-04-03T00:00:00Z","dateUpdated":"2020-04-03T00:00:00Z","description":"Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.","dueDate":"2022-07-28T00:00:00Z","id":"CVE-2020-5722","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"UCM6200","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"vulncheck_kev","title":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","vendor":"Grandstream"}