ZTE F680 Input Validation Error Vulnerability

ZTE F680 is an external antenna dual-band GPON home gateway device from ZTE Corporation ZTE, China. A security vulnerability exists in the ZTE F680 version V9.0.10P1N6, which originates from incorrect access control. An attacker can exploit the vulnerability to tamper with program interface...

CVE-2020-6868: Improper Input Validation

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation...