CVE-2020-6864

MEDIUM

ZTE E8820v3 Firmware < 3.1.0.1000.5 - Information Disclosure

Title source: rule

Description

ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router.

Exploits (1)

nomisec SCANNER

by gigachadusers · poc

https://github.com/gigachadusers/cve-2020-6864

View Code ZIP pw:eip

References (1)

[Vendor Advisory] http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012382

Scores

CVSS v3 6.5

EPSS 0.0009

EPSS Percentile 25.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (1)

zte/e8820v3_firmware < 3.1.0.1000.5

Published Feb 27, 2020

Tracked Since Feb 18, 2026