This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2023-25649 | BDVDB-2026-210423 Detail

ZTEMF286R

Description#

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Impact#

CAPEC-248 Command Injection

Weaknesses#

  • CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.