Overview
CVE-2025-28170 is a significant cybersecurity vulnerability that affects Grandstream Networks GXP1628 devices with versions equal to or less than 1.0.4.130. This flaw exists due to the device’s configuration that enables directory listing, leading to unauthorized access to sensitive directories and files. This situation poses a severe threat as it could potentially lead to system compromise or data leaks, impacting organizations depending on these devices for their operations.
Vulnerability Summary
CVE ID: CVE-2025-28170
Severity: High (CVSS: 7.6)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: System compromise or data leakage
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
Grandstream Networks GXP1628 | <=1.0.4.130 How the Exploit Works
This vulnerability arises from the device being configured with directory listing enabled. This configuration allows an attacker to gain unauthorized access to sensitive directories and files. An attacker could exploit this vulnerability by sending a specially crafted request to the device, leading to the exposure of sensitive information, potential system compromise, or data leakage.
Conceptual Example Code
Here is a conceptual example of how an attacker might exploit this vulnerability:
GET /sensitive/directory HTTP/1.1
Host: target.example.comThis request could potentially expose sensitive files and directories, leading to a breach of the system’s security. An attacker could then manipulate or steal this information, leveraging it for further malicious activities.
Mitigation
To mitigate this vulnerability, users are advised to apply the latest updates and patches provided by the vendor. If a patch is not available, the use of a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can provide temporary mitigation by blocking or alerting on attempts to access these sensitive directories and files.
