Test ID:	1.3.6.1.4.1.25623.1.0.114417
Category:	Privilege escalation
Title:	Grandstream IP Phones GXP14xx <= 1.0.8.9 / GXP16xx <= 1.0.7.70 Privilege Escalation Vulnerability
Summary:	Grandstream GXP14xx and GXP16xx Series IP phones are prone to a; privilege escalation vulnerability.
Description:	Summary: Grandstream GXP14xx and GXP16xx Series IP phones are prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token. Affected Software/OS: - Grandstream GXP14xx Series with firmware version 1.0.8.9 and prior - Grandstream GXP16xx Series with firmware version 1.0.7.70 and prior Solution: No known solution is available as of 03rd March, 2025. Information regarding this issue will be updated once solution details are available. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-50015 https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-50015
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.