Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6849 State: PUBLISHED Published: 2020-01-21T18:30:22 Last Updated: 2024-08-04T09:11:05.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: The marketo-forms-and-tracking plugin through 1.0.2 for WordPress allows wp-admin/admin.php?page=marketo_fat CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://zeroauth.ltd/blog/ - https://wordpress.org/plugins/marketo-forms-and-tracking/#developers - https://wpvulndb.com/vulnerabilities/10031
CVE ID: CVE-2020-6850 State: PUBLISHED Published: 2020-02-17T15:01:33 Last Updated: 2024-08-04T09:11:05.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/#developers - https://zeroauth.ltd/blog/ - https://zeroauth.ltd/blog/2020/01/28/cve-2020-6850-miniorange-saml-wp-plugin-before
opers - https://zeroauth.ltd/blog/ - https://zeroauth.ltd/blog/2020/01/28/cve-2020-6850-miniorange-saml-wp-plugin-before-4-8-84-is-vulnerable-to-xss-via-a-specially-crafted-saml-xml-response/
CVE ID: CVE-2020-6851 State: PUBLISHED Published: 2020-01-13T05:02:35 Last Updated: 2024-08-04T09:11:05.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/01/msg00025.html - https://access.redhat.com/errata/RHSA-2020:0262 - https://access.redhat.com/errata/RHSA-2020:0274 - https://access.redhat.com/errata/RHSA-2020:0296 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ess.redhat.com/errata/RHSA-2020:0296 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBRMI2D3XPVWKE3V52KRBW7BJVLS5LD3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LACIIDDCKZJEPKTTFILSOSBQL7L3FC6V/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/uclouvain/openjpeg/issues/1228 - https://www.debian.org/security/2021/dsa-4882
CVE ID: CVE-2020-6852 State: PUBLISHED Published: 2020-04-02T14:49:31 Last Updated: 2024-08-04T09:11:05.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required. Additional Analyst Notes: - CVE Program Container: References: - https://www.cacagoo.com - https://insights.oem.avira.com/serious-security-flaws-uncovered-in-cacagoo-ip-cameras/
CVE ID: CVE-2020-6854 State: PUBLISHED Published: 2020-02-05T20:22:34 Last Updated: 2024-08-04T09:11:05.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API. Additional Analyst Notes: - CVE Program Container: References: - https://change.sos-berlin.com/browse/JOC-854
CVE ID: CVE-2020-6855 State: PUBLISHED Published: 2020-02-06T16:31:03 Last Updated: 2024-08-04T09:11:05.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://change.sos-berlin.com/browse/JITL-590
CVE ID: CVE-2020-6856 State: PUBLISHED Published: 2020-02-06T16:22:47 Last Updated: 2024-08-04T09:11:05.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders. Additional Analyst Notes: - CVE Program Container: References: - https://change.sos-berlin.com/browse/JOC-853
CVE ID: CVE-2020-6857 State: PUBLISHED Published: 2020-01-21T16:29:49 Last Updated: 2024-08-04T09:11:05.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary. Additional Analyst Notes: - CVE Program Container: References: - http://hyp3rlinx.altervista.org - https://seclists.org/bugtraq/2020/Jan/30 - http://packetstormsecurity.com/files/156015/Neowise-CarbonFTP-1.4-Insecure-Proprietary-Password-Encryption.html - http://seclists.org/fulldisclosure/2020/Jan/29 - http://seclists.org/fulldisclosure/2020/Jan/35 - http://pac
tion.html - http://seclists.org/fulldisclosure/2020/Jan/29 - http://seclists.org/fulldisclosure/2020/Jan/35 - http://packetstormsecurity.com/files/157321/Neowise-CarbonFTP-1.4-Insecure-Proprietary-Password-Encryption.html
CVE ID: CVE-2020-6858 State: PUBLISHED Published: 2020-03-12T13:38:58 Last Updated: 2024-08-04T09:11:05.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/JLLeitschuh - https://github.com/HotelsDotCom/styx/security/advisories/GHSA-6v7p-v754-j89v
CVE ID: CVE-2020-6859 State: PUBLISHED Published: 2020-01-13T16:31:09 Last Updated: 2024-08-04T09:11:05.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' profiles and cover photos via a modified user_id parameter. This is related to ajax_image_upload and ajax_resize_image. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-member/#developers - https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc5
timate-member/#developers - https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L310 - https://github.com/ultimatemember/ultimatemember/blob/627bbb0fae81ac34c60b43f0867eadcf8e1bc523/includes/core/class-files.php#L269 - https://github.com/ultimatemember/ultimatemember/commit/249682559012734a4f7d71f52609b2f301ea55b1 - https://wpvulndb.com/vulnerabilities/10041
CVE ID: CVE-2020-6860 State: PUBLISHED Published: 2020-01-13T06:24:16 Last Updated: 2024-08-04T09:11:05.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/issues/96 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WGY7TAZX2M4NYXXGNHIBBKKN5XMSMKQ4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGQ45S4RH7MC42NHTAGOIHYR4C5IRTMZ/
CVE ID: CVE-2020-6861 State: PUBLISHED Published: 2020-05-06T13:15:31 Last Updated: 2024-08-04T09:11:05.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC. Additional Analyst Notes: - CVE Program Container: References: - https://donjon.ledger.com/lsb/008/ - https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html
CVE ID: CVE-2020-6862 State: PUBLISHED Published: 2020-01-17T17:47:16 Last Updated: 2024-08-04T09:11:05.123Z Vendors: ZTE Corporation Products: F6x2W Problem Types: information leak Description: V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012162 - http://packetstormsecurity.com/files/159135/ZTE-F602W-CAPTCHA-Bypass.html
CVE ID: CVE-2020-6863 State: PUBLISHED Published: 2020-02-27T16:48:05 Last Updated: 2024-08-04T09:11:05.200Z Vendors: ZTE Corporation Products: E8820V3 Problem Types: permission and access control Description: ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012382
CVE ID: CVE-2020-6864 State: PUBLISHED Published: 2020-02-27T16:48:37 Last Updated: 2024-08-04T09:11:05.146Z Vendors: ZTE Corporation Products: E8820V3 Problem Types: information leak Description: ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012382
CVE ID: CVE-2020-6865 State: PUBLISHED Published: 2020-04-30T21:16:32 Last Updated: 2024-08-04T09:11:05.208Z Vendors: n/a Products: OSCP Problem Types: information leakage Description: ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the request, the caller can directly view the internal error code location of the component. Attackers could exploit this vulnerability to obtain sensitive information. This affects: OSCP versions V16.19.10 and V16.19.20. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012782
CVE ID: CVE-2020-6866 State: PUBLISHED Published: 2020-04-30T21:19:07 Last Updated: 2024-08-04T09:11:05.127Z Vendors: n/a Products: ZXCTN 6500 Problem Types: resource management error Description: A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit this vulnerability to cause a denial of service by issuing a specific command. This affects: ZXCTN 6500 version V2.10.00R3B87. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012803
CVE ID: CVE-2020-6867 State: PUBLISHED Published: 2020-04-30T21:13:18 Last Updated: 2024-08-04T09:11:05.121Z Vendors: n/a Products: ZENIC ONE R22b Problem Types: resource management error Description: ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is frequently called by other applications in the case of mass traffic data in the system, it will result in no response for a long time and memory overflow risk. This affects: ZENIC ONE R22b versions V16.19.10P02SP002 and V16.19.10P02SP005. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012842
CVE ID: CVE-2020-6868 State: PUBLISHED Published: 2020-06-01T12:43:31 Last Updated: 2024-08-04T09:11:05.125Z Vendors: n/a Products: ZTE F680 Problem Types: access control Description: There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6 Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/
680 V9.0.10P1N6 Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012866
CVE ID: CVE-2020-6869 State: PUBLISHED Published: 2020-06-17T17:13:19 Last Updated: 2024-08-04T09:11:05.064Z Vendors: n/a Products: <ZTEMarket APK> Problem Types: information leak Description: All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and execute silent installation. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013022
CVE ID: CVE-2020-6870 State: PUBLISHED Published: 2020-06-24T15:43:19 Last Updated: 2024-08-04T09:11:05.126Z Vendors: ZTE Products: NetNumenU31R20 Problem Types: design error Description: The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network management system and equipment. This affects: NetNumenU31R20 V12.17.20T115 Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013043
CVE ID: CVE-2020-6871 State: PUBLISHED Published: 2020-07-20T17:02:29 Last Updated: 2024-08-04T09:11:05.146Z Vendors: n/a Products: <R5300G4?R8500G4?R5500G4> Problem Types: authentication issues Description: The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects: <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100> Additio
.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100> Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013203
CVE ID: CVE-2020-6872 State: PUBLISHED Published: 2020-07-20T17:02:52 Last Updated: 2024-08-04T09:11:05.205Z Vendors: n/a Products: <R5300G4?R8500G4?R5500G4> Problem Types: XSS Description: The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.010
V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013203
CVE ID: CVE-2020-6873 State: PUBLISHED Published: 2020-09-01T20:27:24 Last Updated: 2024-08-04T09:11:05.135Z Vendors: n/a Products: <ZXR10 2800-4_ALMPUFB(LOW)> Problem Types: DoS Description: A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management. This affects: ZXR10 2800-4_ALMPUFB(LOW), all versions up to V3.00.40. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=101340
tes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013403
CVE ID: CVE-2020-6874 State: PUBLISHED Published: 2020-09-01T20:23:13 Last Updated: 2024-08-04T09:11:05.131Z Vendors: n/a Products: <ZXIPTV> Problem Types: cryptographic issues Description: A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-force attack for password guessing. This affects: ZXIPTV, ZXIPTV-WEB-PV5.09.08.04. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013463
CVE ID: CVE-2020-6875 State: PUBLISHED Published: 2020-10-05T14:48:12 Last Updated: 2024-08-04T09:11:05.176Z Vendors: n/a Products: <ZXONE 19700 SNPE> Problem Types: improper access control Description: A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE> Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643
CVE ID: CVE-2020-6876 State: PUBLISHED Published: 2020-10-26T15:35:08 Last Updated: 2024-08-04T09:11:05.172Z Vendors: n/a Products: eVDC Problem Types: XSS Description: A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the attacker could use the vulnerability to steal user cookies or destroy the page structure. This affects: eVDC ZXCLOUD-iROSV6.03.04 Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/Looph
OSV6.03.04 Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013782
CVE ID: CVE-2020-6877 State: PUBLISHED Published: 2020-11-05T20:26:05 Last Updated: 2024-08-04T09:11:05.207Z Vendors: n/a Products: ZXA10 eODN Problem Types: Information Leak Description: A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This affects: ZXA10 eODN V2.3P2T1 Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013843
CVE ID: CVE-2020-6878 State: REJECTED Published: 2021-01-05T17:21:18 Last Updated: 2021-01-05T17:21:18 Description: No description available.
CVE ID: CVE-2020-6879 State: PUBLISHED Published: 2020-11-19T16:35:23 Last Updated: 2024-08-04T09:11:05.146Z Vendors: n/a Products: ZXHN Z500, ZXHN F670L Problem Types: input verification Description: Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule configuration interface. The WEB service backend fails to effectively verify the abnormal input. As a result, the attacker can successfully use the vulnerability to tamper parameter values. This affects
bnormal input. As a result, the attacker can successfully use the vulnerability to tamper parameter values. This affects: ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. This is fixed in ZXHN Z500 V1.0.1.1B1.1000 and ZXHN F670L V1.1.10P2N2. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013922
CVE ID: CVE-2020-6880 State: PUBLISHED Published: 2020-12-01T15:44:11 Last Updated: 2024-08-04T09:11:05.128Z Vendors: n/a Products: ZXV10 W908 Problem Types: SQL injection Description: A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before MIPS_A_1022IPV6R3T6P7Y20. Additional Analyst Notes: - CVE Program Container: References: - http://www.zxelink.com.cn/website/html/CommonContent.html?classify=news&id=43&menuID=20201126153313319
CVE ID: CVE-2020-6881 State: PUBLISHED Published: 2020-12-21T17:18:21 Last Updated: 2024-08-04T09:18:01.465Z Vendors: n/a Products: <ZXHN E8810, ZXHN E8820, ZXHN E8822> Problem Types: DoS Description: ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device to deny service. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13> Additional Analyst Notes: - CVE Program Container: Reference
E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13> Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014202
CVE ID: CVE-2020-6882 State: PUBLISHED Published: 2020-12-21T17:18:42 Last Updated: 2024-08-04T09:18:01.519Z Vendors: n/a Products: <ZXHN E8810, ZXHN E8820, ZXHN E8822> Problem Types: information leak Description: ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQTT server, so as to obtain information about other devices by sending specific topics. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13> Additional Analyst Notes: - CVE Program Container: Refe
0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13> Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014202
CVE ID: CVE-2020-6883 State: REJECTED Published: 2021-01-05T17:21:18 Last Updated: 2021-01-05T17:21:18 Description: No description available.
CVE ID: CVE-2020-6884 State: REJECTED Published: 2021-01-05T17:21:18 Last Updated: 2021-01-05T17:21:18 Description: No description available.
CVE ID: CVE-2020-6885 State: REJECTED Published: 2021-01-05T17:21:18 Last Updated: 2021-01-05T17:21:18 Description: No description available.
CVE ID: CVE-2020-6886 State: REJECTED Published: 2021-01-05T17:21:18 Last Updated: 2021-01-05T17:21:18 Description: No description available.
CVE ID: CVE-2020-6887 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.
CVE ID: CVE-2020-6888 State: REJECTED Published: 2021-01-05T17:21:19 Last Updated: 2021-01-05T17:21:19 Description: No description available.