VULNERABILITY INTELLIGENCE

CVE-2023-41782

CVSS score3.9 LOW
EPSS probability0.20%
CISA KEVNot currently listed
Published2024-01-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Description

There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code.

Weakness classification

  • CWE-20: Improper Input Validation
  • CWE-427: Uncontrolled Search Path Element

Primary references