VULNERABILITY INTELLIGENCE

CVE-2023-25643

CVSS score8.4 HIGH
EPSS probability1.77%
CISA KEVNot currently listed
Published2023-12-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Weakness classification

  • psirt@zte.com.cn: CWE-77
  • nvd@nist.gov: CWE-77

Primary references