CVE-2023-25648 | BDVDB-2026-219322 Detail
ZTEZXCLOUD iRAI
Description#
There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-732 Incorrect Permission Assignment for Critical Resource
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.