CVE-2020-6880

2020-12-0115:44:11

zte

www.cve.org

0.001 Low

EPSS

Percentile

46.4%

JSON

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before MIPS_A_1022IPV6R3T6P7Y20.

CNA Affected

[
  {
    "product": "ZXV10 W908",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "all versions before MIPS_A_1022IPV6R3T6P7Y20"
      }
    ]
  }
]

References

www.zxelink.com.cn/website/html/CommonContent.html?classify=news&id=43&menuID=20201126153313319

0.001 Low

EPSS

Percentile

46.4%

JSON

Related for CVELIST:CVE-2020-6880