Lucene search
HistoryDec 14, 2023 - 8:15 a.m.
CVE-2023-25642
cve-2023-25642
buffer overflow
zte
mobile internet
authenticated attacker
denial of service
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
13.5%
There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack.
Affected configurations
Node
ztemc801aMatch-
ztemc801a_firmwareMatchmc801a_elisa3_b19
Node
ztemc801a1Match-
ztemc801a1_firmwareMatchmc801a1_elisa1_b04
Related
cnvd
cnvd
ZTE MC801A tcp port parameter buffer overflow vulnerability
2023-12-18 00:00:00
cvelist
cvelist
CVE-2023-25642 Two Vulnerabilities in Some ZTE Mobile Internet Products
2023-12-14 07:17:08
cve
cve
CVE-2023-25642
2023-12-14 08:15:37
prion
prion
Buffer overflow
2023-12-14 08:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
13.5%
Related for NVD:CVE-2023-25642