Vulnerability in ZTE E8820v3
CVE-2020-6864
ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router.
EPSS: 0.005 (42.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Zte E8820v3
- Zte E8820v3_firmware
- Zte Corporation E8820v3 — versions All versions up to V3.1.0.1000.4
Public proof-of-concept exploits
References
- psirt@zte.com.cn (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-6864?
- CVE-2020-6864 is a medium-severity vulnerability in ZTE E8820v3. CVSS score: 6.5/10. Published 2020-02-27.
- How severe is CVE-2020-6864?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2020-6864 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.