CVE-2020-6880 | BDVDB-2026-145288 Detail

ZXV10 W908

Description#

A ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need to log in. By sending malicious SQL statements, because the device does not properly filter parameters, successful use can obtain management rights. This affects: ZXV10 W908 all versions before MIPS_A_1022IPV6R3T6P7Y20.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zxelink.com.cn/website/html/CommonContent.html?classify=news&id=43&menuID=20201126153313319

Exploit#

No public exploit known

History#

Version 12020-12-01Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.