Improper input validation in ZXHN Z500
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Some ZTE devices have input verification vulnerabilities. The devices support configuring a static prefix through the web management page. The restriction of the front-end code can be bypassed by constructing a POST request message and sending the request to the creation of a static routing rule configuration interface. The WEB service backend fails to effectively verify the abnormal input. As a result, the attacker can successfully use the vulnerability to tamper parameter values. This affects: ZXHN Z500 V1.0.0.2B1.1000 and ZXHN F670L V1.1.10P1N2E. This is fixed in ZXHN Z500 V1.0.1.1B1.1000 and ZXHN F670L V1.1.10P2N2.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | ZXHN Z500 | Affects: V1.0.0.2B1.1000; Fixed: V1.0.1.1B1.1000 | — | No fix listed | CNA |
| — | ZXHN F670L | Affects: V1.1.10P1N2E; Fixed: V1.1.10P2N2 | — | No fix listed | CNA |
- ZXHN Z500 Vendor— Affected Affects: V1.0.0.2B1.1000; Fixed: V1.0.1.1B1.1000 Fixed in — No fix listed CNA
- ZXHN F670L Vendor— Affected Affects: V1.1.10P1N2E; Fixed: V1.1.10P2N2 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:zte:zxhn_z500_firmware:v1.0.0.2b1.1000:*:*:*:*:*:*:* | v1.0.0.2b1.1000 | Vulnerable | ZTE |
| cpe:2.3:h:zte:zxhn_z500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ZTE |
| cpe:2.3:o:zte:zxhn_f670l_firmware:v1.1.10p1n2e:*:*:*:*:*:*:* | v1.1.10p1n2e | Vulnerable | ZTE |
| cpe:2.3:h:zte:zxhn_f670l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ZTE |
- cpe:2.3:o:zte:zxhn_z500_firmware:v1.0.0.2b1.1000:*:*:*:*:*:*:* Versions v1.0.0.2b1.1000 Vulnerable ·ZTE
- cpe:2.3:h:zte:zxhn_z500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
- cpe:2.3:o:zte:zxhn_f670l_firmware:v1.1.10p1n2e:*:*:*:*:*:*:* Versions v1.1.10p1n2e Vulnerable ·ZTE
- cpe:2.3:h:zte:zxhn_f670l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-6879
- 2026-10-03 Alias added: GHSA-3jm3-wf93-rc5x
References
Sources
- CVE-2020-6879 · CVE Program
- CVE-2020-6879 · NVD
- FIRST EPSS
- GHSA-3jm3-wf93-rc5x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences