ZTE MC801A Command Injection Vulnerability

2023-12-1800:00:00

China National Vulnerability Database

www.cnvd.org.cn

zte mc801a

input validation

remote attacker

arbitrary commands

china

wifi router

cnvd

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

18.7%

JSON

The ZTE MC801A is a 5g indoor WiFi router from China’s ZTE (ZTE). The ZTE MC801A suffers from an input validation vulnerability in the handling of multiple network parameters, which can be exploited by a remote attacker to submit a special request that can be used in the application context to execute arbitrary commands.