CVE-2020-5756

8.8 highEPSS 2.5%

High (8.8) in grandstream gwn7000 firmware. EPSS 2.5% chance of exploitation in the next 30 days.

Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitrary OS commands on the router.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWEs: CWE-78, CWE-489
Published: 2020-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

grandstream:gwn7000_firmware

References

https://www.tenable.com/security/research/tra-2020-41
https://www.tenable.com/cve/CVE-2020-5756
https://www.tenable.com/security/research/tra-2020-41

Check your stack JSON