CVE-2020-6875

EPSS 0.26%
Veröffentlicht 05.10.2020 15:15:12
Zuletzt bearbeitet 21.11.2024 05:36:20
Quelle psirt@zte.com.cn
CVE-Watchlists
Login
Unerledigt
Login

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zte ≫ Zxone 19700 Snpe Firmware Versionzxone8700v1.40r2b13_snpe

Zte ≫ Zxone 19700 Snpe Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.26%	0.461

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-6875

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-6875

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-6875

EUVD