CVE-2020-6877

EPSS 0.31%
Published 05.11.2020 21:15:12
Last modified 21.11.2024 05:36:20
Source psirt@zte.com.cn
Teams watchlist Login
Open Login

A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This affects: ZXA10 eODN V2.3P2T1

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Zte ≫ Zxa10 Eodn Firmware Version2.3p2t1

Zte ≫ Zxa10 Eodn Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.31%	0.513

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013843

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-6877

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-6877

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-6877

EUVD