CVE-2020-6881

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-21 · updated 2026-06-17
Weakness: CWE-346

Description

ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to the specified device, which will cause the device to deny service. This affects:<ZXHN E8810, ZXHN E8820, ZXHN E8822><E8810 V1.0.26, E8810 V2.0.1, E8820 V1.1.3L, E8820 V2.0.13, E8822 V2.0.13>

Affected products

ZTE Zxhn E8810 Firmware: 1.0.26, 2.0.1
ZTE Zxhn E8820 Firmware: 1.1.3, 2.0.13
ZTE Zxhn E8822 Firmware: 2.0.13

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014202
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014202

Get alerted when CVE-2020-6881 or the next vulnerability affects your stack