CRITICAL🇵🇱 Wersja polska

CVE-2020-22253

CVSS 9.8v3.1pub. 2022-04-06upd. 2024-11-21

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Xiongmaitech Ahb7008t Mh V2

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7008t Mh V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.7601.nat.onvifc.20170420

  • Xiongmaitech Ahb7804r Els

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7804r Els Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvifc.20160422

  • Xiongmaitech Ahb7804r Lms

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7804r Lms Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvifc.20170301

  • Xiongmaitech Ahb7804r Mh V2

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7804r Mh V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.7601.nat.onvifc.20170424

  • Xiongmaitech Ahb7808r Ms

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7808r Ms Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvifc.20170328

  • Xiongmaitech Ahb7808r Ms V2

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7808r Ms V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvifc.20170327

  • Xiongmaitech Ahb7808t Ms V2

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Ahb7808t Ms V2 Firmware

    OS
    Xiongmaitech
    4.02.r11.nat.onvifc.20161205

  • Xiongmaitech Hi3518e 50h10l S39

    HW
    Xiongmaitech
    all versions

  • Xiongmaitech Hi3518e 50h10l S39 Firmware

    OS
    Xiongmaitech
    4.02.r12.nat.onvifs.20170727_all
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2021-41506CRITICAL9.8PL ✓same product

Backdoor w firmware urządzeń Xiongmai — statyczne dane konta root

CVE-2017-16725CRITICAL9.8PL ✓same product

Stack-based Buffer Overflow w kamerach IP i DVR Xiongmai Technology

CVE-2025-65856CRITICAL9.8PL ✓same vendor

Authentication bypass w kamerach IP Xiongmai XM530 — dostęp bez uwierzytelnienia

CVE-2022-45460CRITICAL9.8PL ✓same vendor

Stack-based buffer overflow w urządzeniach NVR Xiongmai — RCE bez uwierzytelnienia

CVE-2018-17915CRITICAL9.8PL ✓same vendor

Brak szyfrowania komunikacji w Xiongmai XMeye P2P Cloud Server