VULNERABILITY INTELLIGENCE
CVE-2023-41779
CVSS score4.4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-01-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Description
There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed.
Weakness classification
- psirt@zte.com.cn: CWE-119
- nvd@nist.gov: CWE-863
Primary references
- psirt@zte.com.cn — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory