This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-25648 | BDVDB-2026-219322 Detail

ZTEZXCLOUD iRAI

Description#

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.

Impact#

CAPEC-233 Privilege Escalation

Weaknesses#

  • CWE-732 Incorrect Permission Assignment for Critical Resource

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.