CVE-2020-6871: Critical severity zte r8500g4 vulnerability
The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects: <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-6871?
The severity of CVE-2020-6871 is classified as high due to its potential to allow unauthorized command execution.
How do I fix CVE-2020-6871?
To fix CVE-2020-6871, you should update the affected ZTE firmware to a patched version provided by the vendor.
What products are affected by CVE-2020-6871?
CVE-2020-6871 affects various versions of ZTE R5300G4, R5500G4, and R8500G4 firmware.
What does CVE-2020-6871 allow an attacker to do?
CVE-2020-6871 allows an attacker to bypass authentication and execute commands with high-level user privileges.
Is there any workaround for CVE-2020-6871?
Currently, the best approach is to apply updates as there are no effective workarounds for CVE-2020-6871.