CVE-2020-6870

Name of the Vulnerable Software and Affected Versions ZTE U31R20 version V12.17.20T115 NetNumenU31R20 version V12.17.20T115

Description A design error vulnerability allows an attacker to exploit the issue and log in to the FTP server. This could lead to tampering with the password and unauthorized file operations, including downloading, modifying, uploading, or deleting files. The exploitation of this issue can cause improper operation of the network management system and equipment.

Recommendations For ZTE U31R20 version V12.17.20T115, consider restricting access to the FTP server until a fix is available. For NetNumenU31R20 version V12.17.20T115, restrict access to the FTP server until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.