Medium severity · published Feb 27, 2020
CVE-2020-6864
ZTE E8820V3 router product is impacted by an information leak vulnerability
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
E8820v3 Firmware · Zte
before 3.1.0.1000.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6864
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6864
Vendor Advisory
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012382
More from E8820v3 Firmware
6.5
CVE-2020-6863
ZTE E8820V3 router product is impacted by a permission and access control vulnerability