A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.Referenceshttp://grandstream.com/support/firmwarehttps://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/
