Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-6868
HistoryJun 01, 2020 - 1:15 p.m.

Input validation

2020-06-0113:15:00
PRIOn knowledge base
www.prio-n.com
3

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.5%

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6

CPENameOperatorVersion
f680_firmwareeqzxhn-f680v9.0.10p1n6

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.5%

Related for PRION:CVE-2020-6868