CVE-2020-6875

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-68765.4A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEBCVE-2020-68778.8A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication passwoCVE-2020-68793.5Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. TCVE-2020-68809.8A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statemeCVE-2020-68817.5ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of CVE-2020-68827.5ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials oCVE-2020-69177.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69187.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69197.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69205.5Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69217.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69227.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i