← CVE Intelligence

CVE-2023-25648

Weak Folder Permission Vulnerability in ZTE ZXCLOUD iRAI PUBLISHED

Description (CNA)

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.

Affected (CNA)

Vendor / productVersions
ZTE / ZXCLOUD iRAIaffected All versions up to V7.23.20 through V7.23.20

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.