CVE-2020-22253: Critical severity xiongmaitech ahb7008t-mh-v2 vulnerability

Published Apr 6, 2022

Updated

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E50H10LS39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

Affected Software

16 affected components

Xiongmaitech Ahb7008t-mh-v2 Firmware=4.02.r11.7601.nat.onvifc.20170420

Xiongmaitech Ahb7008t-mh-v2

Xiongmaitech Ahb7804r-els Firmware=4.02.r11.nat.onvifc.20160422

Xiongmaitech Ahb7804r-els

Xiongmaitech Ahb7804r-mh-v2 Firmware=4.02.r11.7601.nat.onvifc.20170424

Xiongmaitech Ahb7804r-mh-v2

Xiongmaitech Ahb7808r-ms-v2 Firmware=4.02.r11.nat.onvifc.20170327

Xiongmaitech Ahb7808r-ms-v2

Xiongmaitech Ahb7808r-ms Firmware=4.02.r11.nat.onvifc.20170328

Xiongmaitech Ahb7808r-ms

Xiongmaitech Ahb7808t-ms-v2 Firmware=4.02.r11.nat.onvifc.20161205

Xiongmaitech Ahb7808t-ms-v2

Xiongmaitech Ahb7804r-lms Firmware=4.02.r11.nat.onvifc.20170301

Xiongmaitech Ahb7804r-lms

Xiongmaitech Hi3518e 50h10l S39 Firmware=4.02.r12.nat.onvifs.20170727_all

Xiongmaitech Hi3518e 50h10l S39

Event History

Apr 6, 2022

CVE Published

via MITRE·10:41 PM

Data Sourced

via MITRE·10:41 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-22253?

The severity of CVE-2020-22253 is critical with a severity value of 9.8.

Which Xiongmai Technology Co devices are affected by CVE-2020-22253?

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 are affected by CVE-2020-22253.

What is the vulnerability in CVE-2020-22253?

The vulnerability in CVE-2020-22253 is the presence of an open port 9530 which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

How can I fix CVE-2020-22253?

To fix CVE-2020-22253, it is recommended to apply the latest firmware update provided by Xiongmai Technology Co.

Where can I find more information about CVE-2020-22253?

You can find more information about CVE-2020-22253 on the official Xiongmai Technology Co website at http://www.xiongmaitech.com/en/index.php/news/info/12/68.