CVE-2020-6874: ZTE Zxiptv Firmware

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is not properly used, so remote attackers could use this vulnerability for account credential enumeration attack or brute-force attack for password guessing. This affects: ZXIPTV, ZXIPTV-WEB-PV5.09.08.04.

Affected products

• ZTE Zxiptv Firmware: version zxiptv-web-pv5.09.08.04 only

Published 2020-09-01. Last modified 2026-06-17.