VULNERABILITY INTELLIGENCE

CVE-2023-41780

CVSS score6.4 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2024-01-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.

Weakness classification

  • psirt@zte.com.cn: CWE-22
  • nvd@nist.gov: CWE-427

Primary references