CVE-2020-6872

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects <R5300G4V03.08.0100/V03.07.0300/V03.07.0200/V03.07.0108/V03.07.0100/V03.05.0047/V03.05.0046/V03.05.0045/V03.05.0044/V03.05.0043/V03.05.0040/V03.04.0020;R8500G4V03.07.0103/V03.07.0101/V03.06.0100/V03.05.0400/V03.05.0020;R5500G4V03.08.0100/V03.07.0200/V03.07.0100/V03.06.0100>.

• CWE-79

• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013203Vendor Advisory
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013203Vendor Advisory

Published

Jul 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6866A ZTE product is impacted by a resource management error vul…4.9
• CVE-2020-6867ZTE's SDON controller is impacted by the resource management…5.5
• CVE-2020-6868There is an input validation vulnerability in a PON terminal…6.5
• CVE-2020-6869All versions up to 10.06 of ZTEMarket APK are impacted by an…8.1
• CVE-2020-6870The version V12.17.20T115 of ZTE U31R20 product is impacted …8
• CVE-2020-6871The server management software module of ZTE has an authenti…9.8
• CVE-2020-6873A ZTE product has a DoS vulnerability. Because the equipment…5.3
• CVE-2020-6874A ZTE product is impacted by the cryptographic issues vulner…9.1
• CVE-2020-6875A ZTE product is impacted by the improper access control vul…9.8
• CVE-2020-6876A ZTE product is impacted by an XSS vulnerability. The vulne…5.4
• CVE-2020-6877A ZTE product is impacted by an information leak vulnerabili…8.8
• CVE-2020-6878Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…