What’s Vulnerable › Vulnerabilities

CVE-2020-22253

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-06 · updated 2026-06-17

Description

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

Affected products

• Xiongmaitech Ahb7008T-Mh-V2 Firmware: 4.02.r11.7601.nat.onvifc.20170420
• Xiongmaitech Ahb7804R-Els Firmware: 4.02.r11.nat.onvifc.20160422
• Xiongmaitech Ahb7804R-Lms Firmware: 4.02.r11.nat.onvifc.20170301
• Xiongmaitech Ahb7804R-Mh-V2 Firmware: 4.02.r11.7601.nat.onvifc.20170424
• Xiongmaitech Ahb7808R-Ms-V2 Firmware: 4.02.r11.nat.onvifc.20170327
• Xiongmaitech Ahb7808R-Ms Firmware: 4.02.r11.nat.onvifc.20170328
• Xiongmaitech Ahb7808T-Ms-V2 Firmware: 4.02.r11.nat.onvifc.20161205
• Xiongmaitech Hi3518E 50H10L S39 Firmware: 4.02.r12.nat.onvifs.20170727_all

References

• http://www.xiongmaitech.com/en/index.php/news/info/12/68
• http://www.xiongmaitech.com/en/index.php/news/info/12/68

Get alerted when CVE-2020-22253 or the next vulnerability affects your stack