ZTE Zxhn e8820 Firmware vulnerabilities

2 CVEs affecting ZTE Zxhn e8820 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6882, published 2020-12-21.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-6882, published 2020-12-21. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential…
• CVE-2020-6881, published 2020-12-21. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the…