CVE-2020-6866

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by issuing a specific command. This affects: ZXCTN 6500 version V2.10.00R3B87.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Apr 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-68675.5ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the CVE-2020-68686.5There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB mana CVE-2020-68698.1All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can ex CVE-2020-68708.0The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to CVE-2020-68719.8The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the CVE-2020-68726.1The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground CVE-2020-68735.3A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http link CVE-2020-68749.1A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers coul CVE-2020-68759.8A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program CVE-2020-68765.4A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB CVE-2020-68778.8A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication passwo CVE-2020-68793.5Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. T