Vulnerabilities > ZTE

DATE CVE VULNERABILITY TITLE RISK
2024-01-10 CVE-2023-41781 Cross-site Scripting vulnerability in ZTE Mf258 Firmware Ztestdv1.0.0B08/Ztestdv1.0.0B10
There is a Cross-site scripting (XSS)  vulnerability in ZTE MF258.
network
low complexity
zte CWE-79
6.1
2024-01-05 CVE-2023-41782 Uncontrolled Search Path Element vulnerability in ZTE Zxcloud Irai Firmware
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code.
local
low complexity
zte CWE-427
4.8
2024-01-04 CVE-2023-41784 Unspecified vulnerability in ZTE Redmagic 8 PRO Firmware Gencnnx729Jv1.0.0B21Mr
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro
local
low complexity
zte
5.5
2024-01-03 CVE-2023-41776 Improper Privilege Management vulnerability in ZTE Zxcloud Irai Firmware
There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate local privileges.
local
low complexity
zte CWE-269
7.8
2024-01-03 CVE-2023-41779 Incorrect Authorization vulnerability in ZTE Zxcloud Irai Firmware
There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed.
local
low complexity
zte CWE-863
5.5
2024-01-03 CVE-2023-41780 Uncontrolled Search Path Element vulnerability in ZTE Zxcloud Irai Firmware
There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI.
local
low complexity
zte CWE-427
7.8
2024-01-03 CVE-2023-41783 Code Injection vulnerability in ZTE Zxcloud Irai Firmware
There is a command injection vulnerability of ZTE's ZXCLOUD iRAI.
local
low complexity
zte CWE-94
7.8
2023-12-14 CVE-2023-25642 Classic Buffer Overflow vulnerability in ZTE Mc801A1 Firmware and Mc801A Firmware
There is a buffer overflow vulnerability in some ZTE mobile internet producsts.
network
low complexity
zte CWE-120
6.5
2023-12-14 CVE-2023-25643 Command Injection vulnerability in ZTE Mc801A1 Firmware and Mc801A Firmware
There is a command injection vulnerability in some ZTE mobile internet products.
network
low complexity
zte CWE-77
8.8
2023-12-14 CVE-2023-25644 Unspecified vulnerability in ZTE Mc801A1 Firmware and Mc801A Firmware
There is a denial of service vulnerability in some ZTE mobile internet products.
network
low complexity
zte
7.5