CVE-2020-22253

moderate-risk
Published 2022-04-06

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

Do I need to act?

-
0.62% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (8)

Ahb7008T-Mh-V2 Firmware
Ahb7804R-Els Firmware
Ahb7804R-Mh-V2 Firmware
Ahb7808R-Ms-V2 Firmware
Ahb7808R-Ms Firmware
Ahb7808T-Ms-V2 Firmware
Ahb7804R-Lms Firmware
Hi3518E 50H10L S39 Firmware

Affected Vendors

48
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 2/34 · Minimal
Exposure 14/34 · Moderate