Vulnerabilities > ZTE > Zxcloud Irai Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-03 CVE-2023-41776 Improper Privilege Management vulnerability in ZTE Zxcloud Irai Firmware
There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate local privileges.
local
low complexity
zte CWE-269
7.8
2024-01-03 CVE-2023-41780 Uncontrolled Search Path Element vulnerability in ZTE Zxcloud Irai Firmware
There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI.
local
low complexity
zte CWE-427
7.8
2024-01-03 CVE-2023-41783 Code Injection vulnerability in ZTE Zxcloud Irai Firmware
There is a command injection vulnerability of ZTE's ZXCLOUD iRAI.
local
low complexity
zte CWE-94
7.8
2023-12-14 CVE-2023-25648 Incorrect Permission Assignment for Critical Resource vulnerability in ZTE Zxcloud Irai Firmware 6.03.04
There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product.
local
low complexity
zte CWE-732
7.8