The vulnerability of the server management module of ZTE’s R5300G4, R8500G4, and R5500G4 servers allows attackers to execute arbitrary commands.

The vulnerability of the server management module of ZTE’s R5300G4, R8500G4, and R5500G4 servers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Authentication flaw

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

CVE-2020-6872

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...