This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-25643 | BDVDB-2026-219320 Detail

ZTEMC801A

Description#

There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands.

Impact#

CAPEC-248 Command Injection

Weaknesses#

  • CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.