ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2020-22253

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.
A workaround or mitigation is available. Apply it until an official patch is released.
9.8
CVSS
7.2
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsPresent
PrivilegesNone
User InteractionNone
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusMitigation

Change Log
DateSourceChangesScore
2026-07-21nvdAV: P→N, AC: H→L, PR: H→N, UI: A→N, VC: N→H, VI: N→H, VA: N→H0.0 → 7.2
2026-07-21nvdpatch: Unavailable→Mitigation0.0 → 0.0
2026-07-21cve.orginitial, patch: Unavailable0.0

Affected Software
VendorProductVersion
xiongmaitechahb7008t-mh-v2_firmware4.02.r11.7601.nat.onvifc.20170420
xiongmaitechahb7804r-els_firmware4.02.r11.nat.onvifc.20160422
xiongmaitechahb7804r-lms_firmware4.02.r11.nat.onvifc.20170301
xiongmaitechahb7804r-mh-v2_firmware4.02.r11.7601.nat.onvifc.20170424
xiongmaitechahb7808r-ms_firmware4.02.r11.nat.onvifc.20170328
xiongmaitechahb7808r-ms-v2_firmware4.02.r11.nat.onvifc.20170327
xiongmaitechahb7808t-ms-v2_firmware4.02.r11.nat.onvifc.20161205
xiongmaitechhi3518e_50h10l_s39_firmware4.02.r12.nat.onvifs.20170727_all
Published: 2022-04-06