CVE-2020-6881

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device to deny service. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-346

Affected software

VendorProductVersions
n/a<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>

References

Timeline

Published
Dec 21, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-68827.5ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials oCVE-2020-69177.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69187.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69197.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69205.5Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69217.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69227.8Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified iCVE-2020-69235.7The HP Linux Imaging and Printing (HPLIP) software may potentially be affected by memory buffer overflow.CVE-2020-69317.8HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.CVE-2020-69329.8An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development PlatfCVE-2020-69335.5An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3CVE-2020-69377.5A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers t