CVE-2020-6875 - A ZTE product is impacted by the improper access control vulnerability

Back Back to CVE browser

CRITICAL

A ZTE product is impacted by the improper access control vulnerability

Published Oct 5, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.17%

Description

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28017
Advisory

Link	Providers	Tags
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28017		Advisory