CoreCVE
Back

MEDIUM

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages

Published Jun 1, 2020

Description

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner zte
Published Jun 1, 2020
Updated Aug 4, 2024
Reserved Jan 13, 2020
Link CVE-2020-6868

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-6868

Red Hat

No data

ENISA EUVD

Assigner zte
Published Jun 1, 2020
Updated Aug 4, 2024
Link EUVD-2020-28010

GitHub

No data