Lucene search
PRIOn knowledge basePRION:CVE-2023-25649HistoryAug 25, 2023 - 10:15 a.m.
Command injection
2023-08-2510:15:00
PRIOn knowledge base
www.prio-n.com
7
zte
command injection
vulnerability
mobile internet
arbitrary commands
set_device_led interface
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mf286r_firmware | eq | cr-lvwrgbmf286rv1.0.0b4 |
Related
zdi
zdi
cve
cve
CVE-2023-25649
2023-08-25 10:15:08
cvelist
cvelist
nvd
nvd
CVE-2023-25649
2023-08-25 10:15:08