Vulnerabilities > ZTE > Mf286R Firmware > cr.lvwrgbmf286rv1.0.0b04

DATE CVE VULNERABILITY TITLE RISK
2023-12-14 CVE-2023-25651 SQL Injection vulnerability in ZTE Mf286R Firmware and Mf833U1 Firmware
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
low complexity
zte CWE-89
8.0
8.0
2023-08-25 CVE-2023-25649 Command Injection vulnerability in ZTE Mf286R Firmware Crlvwrgbmf286Rv1.0.0B04
There is a command injection vulnerability in a mobile internet product of ZTE.
network
low complexity
zte CWE-77
8.8
8.8
2022-11-22 CVE-2022-39066 SQL Injection vulnerability in ZTE Mf286R Firmware Crlvwrgbmf286Rv1.0.0B04
There is a SQL injection vulnerability in ZTE MF286R.
network
low complexity
zte CWE-89
8.8
8.8
2022-11-22 CVE-2022-39067 Classic Buffer Overflow vulnerability in ZTE Mf286R Firmware Crlvwrgbmf286Rv1.0.0B04
There is a buffer overflow vulnerability in ZTE MF286R.
network
low complexity
zte CWE-120
6.5
6.5