Vulnerability · Published Dec 21, 2020 · Assigned by zte

CVE-2020-6881

High 7.5

In plain English

A high-severity security flaw in <ZXHN E8810, ZXHN E8820, ZXHN E8822>. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.6%top 51.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device to deny service. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>

Affected products (as reported)

Vendor	Product	Versions
n/a	<ZXHN E8810, ZXHN E8820, ZXHN E8822>	<E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014202 x_refsource_MISC