CVE-2023-25646
Permission and Access Control Vulnerability in ZTE H388X
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Permission and Access Control Vulnerability in ZTE H388X
| Assigner | zte |
| Reserved | 2023-02-09 |
| Published | 2024-06-20 |
| Updated | 2024-08-02 |
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations.
| CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
CWE-281 Improper Preservation of Permissions
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1035844
