CVE-2023-25651

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Dec 14, 2023
Source updated: Aug 2, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

SQL Injection Vulnerability in Some ZTE Mobile Internet Products

There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Mobile Internet Products

Vendor: ZTE
Product: Mobile Internet Products
Platforms: Linux
Default status: unaffected

Mobile Internet Products · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
BD_MF833U1V1.0.0B01	`affected`	V1.0.0B01	Unavailable	V1.0.0B01	None listed
CR_LVWRGBMF286RV1.0.0B04	`affected`	V1.0.0B04	Unavailable	V1.0.0B04	None listed