CVE-2020-6879

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule configuration interface. The WEB service backend fails to effectively verify the abnormal input. As a result, the attacker can successfully use the vulnerability to tamper parameter values. This affects: ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. This is fixed in ZXHN Z500 V1.0.1.1B1.1000 and ZXHN F670L V1.1.10P2N2.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Nov 19, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-68809.8A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL stateme CVE-2020-68817.5ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of CVE-2020-68827.5ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials o CVE-2020-69177.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i CVE-2020-69187.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i CVE-2020-69197.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i CVE-2020-69205.5Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i CVE-2020-69217.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i CVE-2020-69227.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified i CVE-2020-69235.7The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.CVE-2020-69317.8HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.CVE-2020-69329.8An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platf