← CVE Intelligence

CVE-2023-25643

Two Vulnerabilities in Some ZTE Mobile Internet Products PUBLISHED

Description (CNA)

There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Affected (CNA)

Vendor / productVersions
ZTE / MC801Aaffected MC801A_Elisa3_B19 through B19
ZTE / MC801A1affected MC801A1_Elisa1_B04 through B04

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.