← Vulnerability feed

Vulnerability record · CVE-2020-5723 · published 30 March 2020

CVE-2020-5723: Grandstream ucm6202 firmware cleartext storage of sensitive data vulnerability

Grandstream · Ucm6202 Firmware

The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.

9.8 CVSS 3.1 Critical EPSS 5.9% · top 7.0% CWE-312 · Cleartext storage of sensitive data
9.8CVSS 3.1 base score, v2 5.0
5.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.tenable.com/security/research/tra-2020-17 ExploitThird Party Advisory
https://www.tenable.com/security/research/tra-2020-17 ExploitThird Party Advisory

Track CVE-2020-5723 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-5757Grandstream ucm6202 firmware os command injection vulnerabilityGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can …EPSS 6.9%9.8CVE-2020-5759Grandstream ucm6202 firmware os command injection vulnerabilityGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can e…EPSS 3.2%8.8CVE-2020-5758Grandstream ucm6202 firmware os command injection vulnerabilityGrandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can …EPSS 4.4%8.8CVE-2019-10662Grandstream ucm6204 firmware os command injection vulnerabilityGrandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConf…EPSS 44%8.8CVE-2019-10663Grandstream ucm6204 firmware sql injection vulnerabilityGrandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodebl…EPSS 28%7.5CVE-2020-5724Grandstream ucm6202 firmware sql injection vulnerabilityThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated…EPSS 12%7.5CVE-2020-5726Grandstream ucm6202 firmware sql injection vulnerabilityThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker …EPSS 4.3%5.9CVE-2020-5725Grandstream ucm6202 firmware sql injection vulnerabilityThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2020-5723), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.