CVE-2020-6871: ZTE r5300g4 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects: <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>

Affected products

• ZTE r5300g4 Firmware: version 03.04.0020 only; version 03.05.0040 only; version 03.05.0043 only; version 03.05.0044 only; version 03.05.0045 only; version 03.05.0046 only; …
• ZTE r5500g4 Firmware: version 03.06.0100 only; version 03.07.0100 only; version 03.07.0200 only; version 03.08.0100 only
• ZTE r8500g4 Firmware: version 03.05.0020 only; version 03.05.0400 only; version 03.06.0100 only; version 03.07.0101 only; version 03.07.0103 only

Published 2020-07-20. Last modified 2026-06-17.