CVE-2020-5761

CVE-2020-5761 is a CPU exhaustion vulnerability affecting Grandstream HT800 series firmware versions 1.0.17.5 and below, stemming from an infinite loop in the TR-069 service. This high-severity vulnerability (CVSS 7.5) can be triggered remotely by unauthenticated attackers sending a single-character TCP message, leading to a denial of service. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the FAUCET Risk Score indicates a moderate risk. Organizations using affected Grandstream devices should prioritize patching to mitigate this unauthenticated remote denial-of-service risk.