TI-2020-14315 Aliases CVE-2020-22253 GHSA-cxgc-jm76-g3rq

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2…

MEDIUM 44Published 2022-04-06 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

Why it matters now

EPSS 0.01099 65th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPE	Versions	Role	Vendor
cpe:2.3:o:xiongmaitech:ahb7008t-mh-v2_firmware:4.02.r11.7601.nat.onvifc.20170420:::::::*	4.02.r11.7601.nat.onvifc.20170420	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7008t-mh-v2:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7804r-els_firmware:4.02.r11.nat.onvifc.20160422:::::::*	4.02.r11.nat.onvifc.20160422	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7804r-els:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.7601.nat.onvifc.20170424:::::::*	4.02.r11.7601.nat.onvifc.20170424	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7804r-mh-v2:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7808r-ms-v2_firmware:4.02.r11.nat.onvifc.20170327:::::::*	4.02.r11.nat.onvifc.20170327	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7808r-ms-v2:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7808r-ms_firmware:4.02.r11.nat.onvifc.20170328:::::::*	4.02.r11.nat.onvifc.20170328	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7808r-ms:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd

cpe:2.3:o:xiongmaitech:ahb7008t-mh-v2_firmware:4.02.r11.7601.nat.onvifc.20170420:*:*:*:*:*:*:* Versions 4.02.r11.7601.nat.onvifc.20170420 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7008t-mh-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7804r-els_firmware:4.02.r11.nat.onvifc.20160422:*:*:*:*:*:*:* Versions 4.02.r11.nat.onvifc.20160422 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7804r-els:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7804r-mh-v2_firmware:4.02.r11.7601.nat.onvifc.20170424:*:*:*:*:*:*:* Versions 4.02.r11.7601.nat.onvifc.20170424 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7804r-mh-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7808r-ms-v2_firmware:4.02.r11.nat.onvifc.20170327:*:*:*:*:*:*:* Versions 4.02.r11.nat.onvifc.20170327 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7808r-ms-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7808r-ms_firmware:4.02.r11.nat.onvifc.20170328:*:*:*:*:*:*:* Versions 4.02.r11.nat.onvifc.20170328 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7808r-ms:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd

Show 6 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:xiongmaitech:ahb7808t-ms-v2_firmware:4.02.r11.nat.onvifc.20161205:::::::*	4.02.r11.nat.onvifc.20161205	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7808t-ms-v2:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7804r-lms_firmware:4.02.r11.nat.onvifc.20170301:::::::*	4.02.r11.nat.onvifc.20170301	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7804r-lms:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:hi3518e_50h10l_s39_firmware:4.02.r12.nat.onvifs.20170727_all:::::::*	4.02.r12.nat.onvifs.20170727_all	Vulnerable	Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:hi3518e_50h10l_s39:-:::::::*	not specified by NVD	Running on	Hangzhou Xiongmai Technology Co., Ltd

cpe:2.3:o:xiongmaitech:ahb7808t-ms-v2_firmware:4.02.r11.nat.onvifc.20161205:*:*:*:*:*:*:* Versions 4.02.r11.nat.onvifc.20161205 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7808t-ms-v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:ahb7804r-lms_firmware:4.02.r11.nat.onvifc.20170301:*:*:*:*:*:*:* Versions 4.02.r11.nat.onvifc.20170301 Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:ahb7804r-lms:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:o:xiongmaitech:hi3518e_50h10l_s39_firmware:4.02.r12.nat.onvifs.20170727_all:*:*:*:*:*:*:* Versions 4.02.r12.nat.onvifs.20170727_all Vulnerable ·Hangzhou Xiongmai Technology Co., Ltd
cpe:2.3:h:xiongmaitech:hi3518e_50h10l_s39:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hangzhou Xiongmai Technology Co., Ltd

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2020-22253
2026-10-03 Alias added: GHSA-cxgc-jm76-g3rq

References

Advisory 1

http://www.xiongmaitech.com/en/index.php/news/info/12/68

TI-2017-12293 Memory corruption in Xiongmai Technology IP Cameras and DVRs CVSS 3.0CRITICAL 9.8
TI-2021-18262 Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS… CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences