Vulnerabilities > ZTE > R8500G4 Firmware

DATE CVE VULNERABILITY TITLE RISK
2020-07-20 CVE-2020-6872 Cross-site Scripting vulnerability in ZTE products
The server management software module of ZTE has a storage XSS vulnerability.
network
low complexity
zte CWE-79
6.1
6.1
2020-07-20 CVE-2020-6871 Improper Authentication vulnerability in ZTE products
The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users.
network
low complexity
zte CWE-287
critical
 9.8
9.8