CVE-2020-22253: Xiongmaitech AHB7008T-Mh-v2 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

Affected products

• Xiongmaitech AHB7008T-Mh-v2 Firmware: version 4.02.r11.7601.nat.onvifc.20170420 only
• Xiongmaitech AHB7804R-Els Firmware: version 4.02.r11.nat.onvifc.20160422 only
• Xiongmaitech AHB7804R-Lms Firmware: version 4.02.r11.nat.onvifc.20170301 only
• Xiongmaitech AHB7804R-Mh-v2 Firmware: version 4.02.r11.7601.nat.onvifc.20170424 only
• Xiongmaitech AHB7808R-Ms-v2 Firmware: version 4.02.r11.nat.onvifc.20170327 only
• Xiongmaitech AHB7808R-Ms Firmware: version 4.02.r11.nat.onvifc.20170328 only
• Xiongmaitech AHB7808T-Ms-v2 Firmware: version 4.02.r11.nat.onvifc.20161205 only
• Xiongmaitech HI3518E 50h10l s39 Firmware: version 4.02.r12.nat.onvifs.20170727_all only

Published 2022-04-06. Last modified 2026-06-17.