PT-2020-19284 · Zte · Zxr10 2800-4 Almpufb

Published 2020-09-01 · Updated 2020-09-11 · CVE-2020-6873

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions ZXR10 2800-4 ALMPUFB(LOW) versions up to V3.00.40

Description A denial of service issue exists due to the equipment's inability to distinguish between attack packets and normal packets with valid HTTP links. This allows remote attackers to cause a denial of service in the WEB/TELNET module, making the equipment unmanageable.

Recommendations For versions up to V3.00.40, update to a version later than V3.00.40 to resolve the issue. As a temporary workaround, consider restricting access to the WEB/TELNET module to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-6873

Affected Products

Zxr10 2800-4 Almpufb

References · 3

• https://osv.dev/vulnerability/CVE-2020-6873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6873 · Security Note
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013403 · Vendor Advisory