CVE-2023-41781 — XSS Vulnerability in ZTE MF258 Products

CVE-2023-41781

XSS Vulnerability in ZTE MF258 Products PUBLISHED

Description (CNA)

There is a Cross-site scripting (XSS) vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack will be triggered.

Affected (CNA)

Vendor / product	Versions
ZTE / MF258	affected ZTE_STD_V1.0.0B08 through ZTE_STD_V1.0.0B10

CWE

CWE-20

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034684

ADP enrichment

CVE

No English description supplied.

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034684

CISA-ADP

No English description supplied.

No references supplied.