What is CVE-2020-6875?

CVE-2020-6875 is a critical-severity vulnerability in ZTE Zxone 19700 Snpe, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2020-10-05.

How severe is CVE-2020-6875?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in ZTE Zxone 19700 Snpe

CVE-2020-6875

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>

Vulnerability class: Broken Authentication

EPSS: 0.012 (64.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Zte Zxone_19700_snpe
Zte Zxone_19700_snpe_firmware — versions zxone8700v1.40r2b13_snpe
N/a <zxone 19700 Snpe> — versions <ZXONE8700V1.40R2B13_SNPE>

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

psirt@zte.com.cn (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-6875?: CVE-2020-6875 is a critical-severity vulnerability in ZTE Zxone 19700 Snpe, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2020-10-05.
How severe is CVE-2020-6875?: Critical severity. CVSS v3 base score is 9.8 out of 10.