← CVE Intelligence

CVE-2023-25651

SQL Injection Vulnerability in Some ZTE Mobile Internet Products PUBLISHED

Description (CNA)

There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.

Affected (CNA)

Vendor / productVersions
ZTE / Mobile Internet Productsaffected BD_MF833U1V1.0.0B01 through V1.0.0B01; affected CR_LVWRGBMF286RV1.0.0B04 through V1.0.0B04

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.