cveboard RSS feed

CVE-2023-25643

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Two Vulnerabilities in Some ZTE Mobile Internet Products

There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

MC801A

Vendor
ZTE
Product
MC801A
Platforms
  • Linux
Default status
unaffected
MC801A · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
MC801A_Elisa3_B19affectedB19UnavailableB19None listed

MC801A1

Vendor
ZTE
Product
MC801A1
Platforms
  • Linux
Default status
unaffected
MC801A1 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
MC801A1_Elisa1_B04affectedB04UnavailableB04None listed