CVE-2020-6864

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Feb 27, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-68656.5ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of fa CVE-2020-68664.9A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of se CVE-2020-68675.5ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the CVE-2020-68686.5There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB mana CVE-2020-68698.1All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can ex CVE-2020-68708.0The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to CVE-2020-68719.8The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the CVE-2020-68726.1The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground CVE-2020-68735.3A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http link CVE-2020-68749.1A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers coul CVE-2020-68759.8A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program CVE-2020-68765.4A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB