CVE-2020-6864

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-27 · updated 2026-06-17

Description

ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router.

Affected products

ZTE Corporation E8820V3: before 3.1.0.1000.5 — fixed in 3.1.0.1000.5

How to fix

Upgrade to a fixed version: ZTE Corporation E8820V3 3.1.0.1000.5. Check the vendor advisory for mitigations.

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012382
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012382

Get alerted when CVE-2020-6864 or the next vulnerability affects your stack