CVE-2023-41783 — Command Injection Vulnerability of ZTE's ZXCLOUD iRAI

CVE-2023-41783

Command Injection Vulnerability of ZTE's ZXCLOUD iRAI PUBLISHED

Description (CNA)

There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXCLOUD iRAI	affected All versions up to 7.22.11P2 through 7.22.11P2

CWE

CWE-94

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404

ADP enrichment

CVE

No English description supplied.

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404

CISA-ADP

No English description supplied.

No references supplied.