{"cvss":9.8,"datePublished":"2022-01-28","dateUpdated":"2022-01-28","description":"Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.","dueDate":"2022-07-28","id":"CVE-2020-5722","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5722","product":"UCM6200","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","vendor":"Grandstream"}