ZTE r8500g4 Firmware vulnerabilities

2 CVEs affecting ZTE r8500g4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6872, published 2020-07-20.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-6871, published 2020-07-20. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users.…
• CVE-2020-6872, published 2020-07-20. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the…