Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-25648

Weak Folder Permission Vulnerability in ZTE ZXCLOUD iRAI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zte

Description

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE ZXCLOUD iRAI

Default version status: unaffected

  • All versions up to V7.23.20 to ≤ V7.23.20affected

References