CVE-2020-6873: ZTE ZXR10 2800-4 Almpufb(low) Firmware

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management. This affects: ZXR10 2800-4_ALMPUFB(LOW), all versions up to V3.00.40.

Affected products

• ZTE ZXR10 2800-4 Almpufb(low) Firmware: up to and including 3.00.40

Published 2020-09-01. Last modified 2026-06-17.