Cyber Resilience

CVE-2020-22253

Critical

Published: 06 April 2022

Published
06 April 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0062 70.5th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2020-22253 is a critical-severity an unspecified weakness vulnerability in Xiongmaitech Ahb7008T-Mh-V2 Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 29.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

CWE(s)
NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

xiongmaitech
ahb7008t-mh-v2 firmware
4.02.r11.7601.nat.onvifc.20170420
xiongmaitech
ahb7804r-els firmware
4.02.r11.nat.onvifc.20160422
xiongmaitech
ahb7804r-mh-v2 firmware
4.02.r11.7601.nat.onvifc.20170424
xiongmaitech
ahb7808r-ms-v2 firmware
4.02.r11.nat.onvifc.20170327
xiongmaitech
ahb7808r-ms firmware
4.02.r11.nat.onvifc.20170328
xiongmaitech
ahb7808t-ms-v2 firmware
4.02.r11.nat.onvifc.20161205
xiongmaitech
ahb7804r-lms firmware
4.02.r11.nat.onvifc.20170301
xiongmaitech
hi3518e 50h10l s39 firmware
4.02.r12.nat.onvifs.20170727_all

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References