critical9.8
CVE-2020-22253
Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 …
Impact
Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiongmaitech | Ahb7008t-Mh-V2 Firmware | Version 4.02.r11.7601.nat.onvifc.20170420 |
| Xiongmaitech | Ahb7804r-Els Firmware | Version 4.02.r11.nat.onvifc.20160422 |
| Xiongmaitech | Ahb7804r-Mh-V2 Firmware | Version 4.02.r11.7601.nat.onvifc.20170424 |
| Xiongmaitech | Ahb7808r-Ms-V2 Firmware | Version 4.02.r11.nat.onvifc.20170327 |
| Xiongmaitech | Ahb7808r-Ms Firmware | Version 4.02.r11.nat.onvifc.20170328 |
| Xiongmaitech | Ahb7808t-Ms-V2 Firmware | Version 4.02.r11.nat.onvifc.20161205 |
| Xiongmaitech | Ahb7804r-Lms Firmware | Version 4.02.r11.nat.onvifc.20170301 |
| Xiongmaitech | Hi3518e 50h10l S39 Firmware | Version 4.02.r12.nat.onvifs.20170727_all |