CVE-2020-6868

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-01 · updated 2026-06-17
Weakness: CWE-20

Description

There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6

Affected products

ZTE F680: zxhn_f680v9.0.10p1n6

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012866
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012866

Get alerted when CVE-2020-6868 or the next vulnerability affects your stack