Loading
Generated remediation guidance and an executive summary. No account required.
Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of Excessive Authentication Attempts. An attacker can perform an arbitrary number of authentication attempts using different passwords and eventually gain access to the targeted account using a brute force attack.
Use CWE-307, Grandstream vendor hub and Ucm6510 Firmware product page to widen CVE-2025-28172 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2025-28171 for nearby disclosures in the same product family.