CVE-2025-28170
7.6HIGHGrandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and f
Published: 7/29/2025Updated: 8/6/2025
Description
Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files.
AI AnalysisPowered by AI
Affected Products
grandstreamgxp1628_firmware
grandstreamgxp1628
-
References
- http://grandstream.comProduct
- https://gist.github.com/Exek1el/928ea6fd06d3b48c1c91cfdc30317d8dExploitThird Party Advisory