Published: 21/12/2020 Updated: 22/12/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device to deny service. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>

Vulnerable Product	Search on Vulmon	Subscribe to Product
zte zxhn_e8810_firmware 1.0.26
zte zxhn_e8810_firmware 2.0.1
zte zxhn_e8820_firmware 1.1.3
zte zxhn_e8820_firmware 2.0.13
zte zxhn_e8822_firmware 2.0.13

CWE-346 http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014202 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-6881

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect