CVE-2023-25645

🗓️ 16 Jun 2023 00:00:00Reported by zteType

Permission and access control vulnerability in ZTE AndroidTV STBs, allowing non-privileged apps to perform protected functions. Could lead to data and app loss

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2023-25645	16 Jun 202319:15	–	attackerkb
CNNVD	ZTE AndroidTV STBs 安全漏洞	16 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-25645	16 Jun 202300:00	–	cvelist
EUVD	EUVD-2023-29584	3 Oct 202520:07	–	euvd
NVD	CVE-2023-25645	16 Jun 202319:15	–	nvd
Prion	Design/Logic Flaw	16 Jun 202319:15	–	prion
Positive Technologies	PT-2023-20206 · Zte · Zte Androidtv Stbs	16 Jun 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-25645	9 Jan 202612:41	–	redhatcve
Vulnrichment	CVE-2023-25645	16 Jun 202300:00	–	vulnrichment

NVD

Node

zte up_t2_4k_firmwareMatchv84511302.1427

AND

zte up_t2_4kMatch-

Node

zte zxv10_b866v2-h_firmwareMatchv84711321.0038

zte zxv10_b866v2-h_firmwareMatchv84711321.0040

zte zxv10_b866v2-h_firmwareMatchv84711321.0045

zte zxv10_b866v2-h_firmwareMatchv84711321.0049

AND

zte zxv10_b866v2-hMatch-

Node

zte zxv10_b866v2_firmwareMatchv82811306.3021

zte zxv10_b866v2_firmwareMatchv82815416.1027

zte zxv10_b866v2_firmwareMatchv82815416.1028

zte zxv10_b866v2_firmwareMatchv82815416.1029

zte zxv10_b866v2_firmwareMatchv82815416.2012

zte zxv10_b866v2_firmwareMatchv84711309.0016

zte zxv10_b866v2_firmwareMatchv84711309.0018

zte zxv10_b866v2_firmwareMatchv84711309.0019

AND

zte zxv10_b866v2Match-

Node

zte zxv10_b860h_v5d0_firmwareMatchv83011303.0049

zte zxv10_b860h_v5d0_firmwareMatchv83011303.0051

zte zxv10_b860h_v5d0_firmwareMatchv83011303.0053

zte zxv10_b860h_v5d0_firmwareMatchv83011303.0063

zte zxv10_b860h_v5d0_firmwareMatchv83011303.0069

AND

zte zxv10_b860h_v5d0Match-

Node

zte zxv10_b866v2f_firmwareMatchv86111338.0026

zte zxv10_b866v2f_firmwareMatchv86111338.0031

zte zxv10_b866v2f_firmwareMatchv86111338.0033

zte zxv10_b866v2f_firmwareMatchv86111338.0035

AND

zte zxv10_b866v2fMatch-

[
  {
    "vendor": "n/a",
    "product": "UP T2 4K, ZXV10 B866V2-H, ZXV10 B866V2,  ZXV10 B860H V5D0, ZXV10 B866V2F",
    "versions": [
      {
        "version": "V84511302.1427,V84711321.0038,V84711321.0040,V84711321.0045,V84711321.0049,V82811306.3021,V84711309.0016,V84711309.0018,V84711309.0019,V82815416.1027,V82815416.1028,V82815416.1029,V82815416.2012,V83011303.0049,V83011303.0051,V83011303.0053,V83011303.0063,V83011303.0069,V86111338.0026,V86111338.0031,V86111338.0033,V86111338.0035",
        "status": "affected"
      }
    ]
  }
]

Source	Link
support	www.support.zte.com.cn/support/news/LoopholeInfoDetail.aspx

12 Dec 2024 18:15Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.7

EPSS0.00039

SSVC

CWE-276