CVE-2020-6874

Name of the Vulnerable Software and Affected Versions ZTE ZXIPTV version 5.09.08.04 ZTE ZXIPTV-WEB version 5.09.08.04

Description The issue is related to cryptographic problems where the encryption algorithm is not used properly. This could allow remote attackers to perform account credential enumeration attacks or brute-force attacks for password guessing.

Recommendations For ZTE ZXIPTV version 5.09.08.04, update the encryption algorithm to properly secure account credentials. For ZTE ZXIPTV-WEB version 5.09.08.04, update the encryption algorithm to properly secure account credentials. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.