{"id":"CVE-2020-6875","aliases":["EUVD-2020-28017","GHSA-jrc6-wgvp-2f2r"],"status":"published","title":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an...","description":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: \u003cZXONE 19700 SNPE\u003e\u003cZXONE8700V1.40R2B13_SNPE\u003e","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01172,"percentile":0.67724,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306","CWE-307"],"published":"2020-10-05T14:48:12Z","modified":"2026-06-17T03:23:57Z","products":[{"vendor":"zte","product":"zxone_19700_snpe_firmware"}],"references":[{"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013643","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6875"},{"url":"https://github.com/advisories/GHSA-jrc6-wgvp-2f2r"}],"sources":{"cve":[{"id":"CVE-2020-6875","description":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: \u003cZXONE 19700 SNPE\u003e\u003cZXONE8700V1.40R2B13_SNPE\u003e","status":"published","published":"2020-10-05T14:48:12Z","modified":"2024-08-04T09:11:05.176Z","updated_at":"2026-11-02T14:35:52.592504Z"}],"euvd":[{"id":"EUVD-2020-28017","description":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: \u003cZXONE 19700 SNPE\u003e\u003cZXONE8700V1.40R2B13_SNPE\u003e","status":"published","published":"2020-10-05T14:48:12Z","modified":"2024-08-04T09:11:05Z","updated_at":"2026-11-03T03:08:01.566283Z"}],"ghsa":[{"id":"GHSA-jrc6-wgvp-2f2r","title":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an...","description":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: \u003cZXONE 19700 SNPE\u003e\u003cZXONE8700V1.40R2B13_SNPE\u003e","status":"published","published":"2022-05-24T17:30:06Z","modified":"2023-01-29T05:04:47Z","cwes":["CWE-307"],"updated_at":"2026-11-02T14:45:38.359776Z"}],"nvd":[{"id":"CVE-2020-6875","description":"A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access right through brute-force attacks. This affects: \u003cZXONE 19700 SNPE\u003e\u003cZXONE8700V1.40R2B13_SNPE\u003e","status":"published","published":"2020-10-05T15:15:12.263Z","modified":"2026-06-17T03:23:57.723Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:06:17.70091Z"}]}}