{"id":"CVE-2023-41780","state":"PUBLISHED","title":"Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI","description":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.\n\n\n","publishedAt":"2024-01-03T01:52:10.749Z","updatedAt":"2024-09-06T17:48:21.970Z","severity":{"score":6.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","source":"zte"},"assigner":"zte","products":["ZTE ZXCLOUD iRAI"],"affected":[{"vendor":"ZTE","product":"ZXCLOUD iRAI","defaultStatus":"unaffected","versions":[{"version":"All versions up to 7.23.23","status":"affected","lessThanOrEqual":"7.23.23","versionType":"custom"}],"platforms":["Windows"]}],"references":["https://https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/41xxx/CVE-2023-41780.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-41780","state":"PUBLISHED","datePublished":"2024-01-03T01:52:10.749Z","dateUpdated":"2024-09-06T17:48:21.970Z","assignerShortName":"zte","assignerOrgId":"6786b568-6808-4982-b61f-398b0d9679eb","dateReserved":"2023-09-01T09:02:00.657Z"},"containers":{"cna":{"title":"Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI","descriptions":[{"lang":"en","value":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.\n\n\n"}],"affected":[{"vendor":"ZTE","product":"ZXCLOUD iRAI","defaultStatus":"unaffected","versions":[{"version":"All versions up to 7.23.23","status":"affected","lessThanOrEqual":"7.23.23","versionType":"custom"}],"platforms":["Windows"]}],"references":[{"url":"https://https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"zte","orgId":"6786b568-6808-4982-b61f-398b0d9679eb","dateUpdated":"2024-01-03T01:57:56.978Z"},"impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"7.23.32"}],"value":"7.23.32"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T19:09:48.247Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"zte","product":"zxcloud_irai_firmware","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"7.23.23","versionType":"custom"}],"cpes":["cpe:2.3:o:zte:zxcloud_irai_firmware:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-03-08T20:33:26.874082Z","id":"CVE-2023-41780","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-06T17:48:21.970Z"}}]}}}