CVE-2020-22253

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39…

published April 6, 2022

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

🚨 An open port on several Xiongmai Technology devices can let attackers connect via Telnet without any authentication. That's like leaving the front door wide open with a 'Welcome' sign! 🔥 Think of it as a restaurant who's forgotten to lock the back door. Anyone can wander in, grab food from the kitchen, and mess with the operations without even needing to ring the bell! If an attacker gains access, they could manipulate device settings or even take control completely, leading to potential data breaches or misuse of the devices. This could be particularly concerning for IoT environments where devices are interconnected!

Put simply

Think of it as a restaurant who's forgotten to lock the back door. Anyone can wander in, grab food from the kitchen, and mess with the operations without even needing to ring the bell! The vulnerability arises from port 9530 being open on Xiongmai Technology devices, allowing unauthenticated Telnet connections. This creates an opportunity for attackers to gain unauthorized access and control the device remotely.

What to do

If an attacker gains access, they could manipulate device settings or even take control completely, leading to potential data breaches or misuse of the devices. This could be particularly concerning for IoT environments where devices are interconnected! To secure your devices, close port 9530 if it's not in use and consider disabling Telnet altogether. Regularly check for firmware updates from Xiongmai Technology to keep your devices fortified against potential exploits. You've got this! Take these steps to secure your devices, and you'll be one step closer to being a security hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01099 · 65.4th percentile
Published
2022-04-06T22:41Z
EPSS history
Timeline
  • 06 APR 22:41Z
    Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39…
    cvelistv5