Lucene search
HistoryDec 14, 2023 - 7:15 a.m.
CVE-2023-25651
cve-2023-25651
zte
sql injection
sms interface
information leak
8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.2%
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
Affected configurations
Node
ztemf833u1_firmwareMatchbd_mf833u1v1.0.0b01
ztemf833u1Match-
Node
ztemf286r_firmwareMatchcr_lvwrgbmf286rv1.0.0b04
ztemf286rMatch-
Related
cve
cve
CVE-2023-25651
2023-12-14 07:15:08
cvelist
cvelist
prion
prion
Sql injection
2023-12-14 07:15:00
8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.2%
Related for NVD:CVE-2023-25651