Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-25651

SQL Injection Vulnerability in Some ZTE Mobile Internet Products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zte

Description

There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE Mobile Internet Products

Default version status: unaffected

  • BD_MF833U1V1.0.0B01 to ≤ V1.0.0B01affected
  • CR_LVWRGBMF286RV1.0.0B04 to ≤ V1.0.0B04affected

References