Vulnerabilities > ZTE > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-14 CVE-2023-25651 SQL Injection vulnerability in ZTE Mf286R Firmware and Mf833U1 Firmware
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
low complexity
zte CWE-89
8.0
2023-08-25 CVE-2023-25649 Command Injection vulnerability in ZTE Mf286R Firmware Crlvwrgbmf286Rv1.0.0B04
There is a command injection vulnerability in a mobile internet product of ZTE.
network
low complexity
zte CWE-77
8.8
2023-06-16 CVE-2023-25645 Incorrect Default Permissions vulnerability in ZTE products
There is a permission and access control vulnerability in some ZTE AndroidTV STBs.
local
low complexity
zte CWE-276
7.7
2023-05-30 CVE-2022-39071 Unspecified vulnerability in ZTE products
There is an unauthorized access vulnerability in some ZTE mobile phones.
local
low complexity
zte
7.1
2023-05-30 CVE-2022-39075 Unspecified vulnerability in ZTE products
There is an unauthorized access vulnerability in some ZTE mobile phones.
local
low complexity
zte
7.1
2022-12-12 CVE-2022-45957 Out-of-bounds Write vulnerability in ZTE Zxhn-H108Ns Firmware H108Nsv1.0.7Uzrdgr2A68
ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.
network
low complexity
zte CWE-787
7.5
2022-11-22 CVE-2022-39066 SQL Injection vulnerability in ZTE Mf286R Firmware Crlvwrgbmf286Rv1.0.0B04
There is a SQL injection vulnerability in ZTE MF286R.
network
low complexity
zte CWE-89
8.8
2022-07-15 CVE-2022-23141 Information Exposure Through Log Files vulnerability in ZTE Zxmp M721 Firmware Commond21Bootv100004Ls1045
ZXMP M721 has an information leak vulnerability.
network
low complexity
zte CWE-532
7.5
2022-06-09 CVE-2022-23138 Use of Insufficiently Random Values vulnerability in ZTE Mf297D Firmware Mf297Dnordic1B05
ZTE's MF297D product has cryptographic issues vulnerability.
network
low complexity
zte CWE-330
7.5
2022-05-12 CVE-2022-23139 Incorrect Authorization vulnerability in ZTE Zxmp M721 Firmware 5.10.030.006
ZTE's ZXMP M721 product has a permission and access control vulnerability.
network
low complexity
zte CWE-863
8.8