9 matches found
ZTE E8810 Information Disclosure Vulnerability
ZTE E8810 is a smart cloud router from ZTE China. The ZTE E8810 suffers from a hard-coded MQTT service vulnerability that can be exploited by remote attackers to submit a special request for unauthorized access to the MQTT server and obtain sensitive information...
CVE-2020-6881
ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device...
CVE-2020-6882: Use of Hard-coded Credentials
ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQTT server, so as to obtain information about other devices by sending specifi...
CVE-2020-6881: Origin Validation Error
ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device...
PT-2020-19291
Name of the Vulnerable Software and Affected Versions ZTE E8810 version 1.0.26 ZTE E8810 version 2.0.1 ZTE E8820 version 1.1.3L ZTE E8820 version 2.0.13 ZTE E8822 version 2.0.13 Description The issue is caused by the failure of the device to verify the validity of abnormal messages, leading to a...
ZTE E8810/E8820/E8822 series 信息泄露漏洞
ZTE E8810 is a smart cloud router from ZTE China. The ZTE E8810 suffers from a hard-coded MQTT service vulnerability that can be exploited by remote attackers to submit a special request for unauthorized access to the MQTT server and obtain sensitive information...
ZTE Multiple Products Access Control Error Vulnerability
The ZTE E8810 and others are a smart cloud router from the Chinese company ZTE. A security vulnerability exists in the ZTE E8810/E8820/E8822 series, which is caused by the device's inability to verify the validity of an exception message. A remote attacker could use this vulnerability to connect ...
PT-2020-19292
Name of the Vulnerable Software and Affected Versions ZTE E8810 version 1.0.26 ZTE E8810 version 2.0.1 ZTE E8820 version 1.1.3L ZTE E8820 version 2.0.13 ZTE E8822 version 2.0.13 Description The issue is caused by hard-coded MQTT service access credentials on the device, allowing a remote attacker...
CSRF Vulnerability in ZTE E8810 Wireless Router
The ZTE E8810 is a dual-band 11ac smart cloud router. A CSRF vulnerability exists in the ZTE E8810 wireless router. It allows an attacker to hijack the administrator identity to restore the router to factory settings...