CVEvulnerability

CVE-2020-6875

9.8 CRITICAL Published 2020-10-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-306

Description

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>

Affected configurations

• zte zxone 19700 snpe firmware zxone8700v1.40r2b13 snpe

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References