by Kastro
Paper/Archive/CVE-2020-6875

CVE-2020-6875

zte — A ZTE product is impacted by the improper access control vulnerability.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 67.5.675 × 2013.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>

Affected

ProductAffectedFixed inSource
<ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643