CVE-2020-6867

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions V16.19.10P02SP002 and V16.19.10P02SP005.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Apr 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-68686.5There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB mana CVE-2020-68698.1All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can ex CVE-2020-68708.0The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to CVE-2020-68719.8The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the CVE-2020-68726.1The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground CVE-2020-68735.3A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http link CVE-2020-68749.1A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers coul CVE-2020-68759.8A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program CVE-2020-68765.4A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB CVE-2020-68778.8A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication passwo CVE-2020-68793.5Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. T CVE-2020-68809.8A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL stateme