CVE-2020-5756

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-07-17 · updated 2026-06-17
Weakness: CWE-489

Description

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.

Affected products

Tenable Grandstream GWN7000: through 1.0.9.4

References

https://www.tenable.com/security/research/tra-2020-41
https://www.tenable.com/cve/CVE-2020-5756
https://www.tenable.com/security/research/tra-2020-41

Get alerted when CVE-2020-5756 or the next vulnerability affects your stack