EUVD-2026-83052
GHSA-w3m6-5c22-j92h
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network SNMP query against a default community string (AV:N/AC:L/PR:N/UI:N); read-only metadata leak yields C:L with no integrity or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query standard MIBs over the SNMP port to retrieve operating system and kernel version, running process names and command-line arguments, network interface configuration, routing table entries, ARP table mappings, active TCP connection details, and file system paths, enabling detailed reconnaissance of the device and adjacent network infrastructure.
AnalysisAI
Unauthenticated remote attackers can query the SNMP v2c service on Grandstream GWN7660ELR access points running firmware before 1.0.27.6 when the service is left with the factory-default community string 'public', harvesting system metadata such as OS and kernel versions, process names and command-line arguments, interface configuration, routing and ARP tables, active TCP connections, and filesystem paths. The CVSS 4.0 base score is 6.9 (vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N) and our independent assessment maps it to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - a read-only reconnaissance issue requiring only UDP/161 reachability, with no write, code execution, or lateral-movement primitive on its own. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires that the device's SNMP v2c service is enabled and left with the factory-default community string 'public' - the specific insecure default this CVE addresses (CWE-1188). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine but modest-priority reconnaissance/information-disclosure issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the GWN7660ELR to firmware 1.0.27.6 (Vendor-released patch: firmware 1.0.27.6), available via the vendor release note at https://firmware.grandstream.com/BETA/Release_Note_GWN7660ELR_7665_1.0.27.6.pdf and the firmware index at https://www.grandstream.com/support/firmware. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today