CVE-2020-6868

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages

published June 1, 2020

CVSS
—
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00789 · 55.8th percentile
Published
2020-06-01T12:43Z
EPSS history
Timeline
  • 01 JUN 12:43Z
    There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages
    cvelistv5