Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface.
- https://cwe.mitre.org/data/definitions/77.html
- https://github.com/Live-Hack-CVE/CVE-2020-25217