CVE-2020-6868 There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages.
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2020-6868?
CVE-2020-6868 is a medium-severity vulnerability in ZTE F680, published on 1 Jun 2020.
Official description
There is an input validation vulnerability in a PON terminal product of ZTE, which supports the creation of WAN connections through WEB management pages. The front-end limits the length of the WAN connection name that is created, but the HTTP proxy is available to be used to bypass the limitation. An attacker can exploit the vulnerability to tamper with the parameter value. This affects: ZTE F680 V9.0.10P1N6
Weakness: CWE-20
Which versions are affected by CVE-2020-6868?
It affects 1 product.
Products include Zte F680 Firmware.
How do I fix CVE-2020-6868?
No fix has been published for CVE-2020-6868 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-6868 being exploited?
There is no known exploitation of CVE-2020-6868 in the wild and no public exploit code.
Sources
Also known as GHSA-5jf8-xj9j-425m.