CVE-2025-2398

The CVE-2025-2398 entry describes a vulnerability in China Mobile P22g-CIac and related devices (ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P, GT3200-8G8P) up to version 20250305. Affects processing of the CLI su Command Handler, allowing the use of default credentials. The attack is network-based...

CVE-2025-2397

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been declared as problematic. This vulnerability affects unknown code of the component Telnet Service. The manipulation leads to improper authorization. The atta...

CVE-2025-2397 China Mobile P22g-CIac Telnet Service improper authorization

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been declared as problematic. This vulnerability affects unknown code of the component Telnet Service. The manipulation leads to improper authorization. The atta...

CVE-2025-2397 China Mobile P22g-CIac Telnet Service improper authorization

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been declared as problematic. This vulnerability affects unknown code of the component Telnet Service. The manipulation leads to improper authorization. The atta...

CVE-2025-2397

CVE-2025-2397 affects multiple China Mobile gateway devices: P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P, and GT3200-8G8P (affected up to 20250305). The issue is in the Telnet Service and is described as an improper authorization vulnerability. Exploitation is possible from the local n...

China Mobile多款产品 安全漏洞

China Mobile P22g-CIac and others are an IoT enterprise gateway from China Mobile China, a Chinese company. A security vulnerability exists in various China Mobile products, which stems from improper authorization. The following products and versions are affected: China Mobile P22g-CIac,...

e-Excellence U-Office Force 安全漏洞

e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. A security vulnerability exists in e-Excellence U-Office Force that stems from improper authentication, which could result in an unauthenticated remote attacker logging in as an administrator...

Morning 安全漏洞

Morning is a public service online e-commerce store by the individual developer of Morning in China. A security vulnerability exists in Morning bc782730c74ff080494f145cc363a0b4f43f7d3e and prior versions, which stems from vulnerability to cross-site request forgery attacks...

China Mobile多款产品 安全漏洞

China Mobile P22g-CIac and others are an IoT enterprise gateway from China Mobile China, a Chinese company. A security vulnerability exists in various China Mobile products that stems from the use of default credentials. The following products and versions are affected: China Mobile P22g-CIac,...

China, Russia, Iran, and North Korea Intelligence Sharing

Former CISA Director Jen Easterly writes about a new international intelligence sharing co-op: Historically, China, Russia, Iran & North Korea have cooperated to some extent on military and intelligence matters, but differences in language, culture, politics & technological sophistication have...

zzskzy Warehouse Refinement Management System 安全漏洞

zzskzy Warehouse Refinement Management System is a Warehouse Refinement Management System from Zhengzhou Time and Space zzskzy Company in China. A security vulnerability exists in zzskzy Warehouse Refinement Management System version 1.3, which stems from an incorrect manipulation of the paramete...

chinaexportauto.com Cross Site Scripting vulnerability OBB-4032954

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

The China-linked threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology IT supply chain as a means to obtain initial access to corporate networks. That's according to new findings...

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in ZZCMS version 2025, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter $SERVER PHPSELF , and can be exploited by an attacker to...

DrayTek Vigor 165 安全漏洞

The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China DrayTek DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that stems from passwords being stored in plaintext...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of uninitialized queues by rtl818x...

OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns

OpenAI on Friday revealed that it banned a set of accounts that used its ChatGPT tool to develop a suspected artificial intelligence AI-powered surveillance tool. The social media listening tool is said to likely originate from China and is powered by one of Meta's Llama models, with the accounts...

OFSoft OFCMS 安全漏洞

OFSoft OFCMS is a content management system CMS developed in Java language by China Zhongtian Network OFSoft. A security vulnerability exists in OFSoft OFCMS version 1.1.3, which stems from vulnerability to cross-site request forgery attacks...

D-Link DIR-825 Command Injection Vulnerability

The D-Link DIR-825 is a router from China's AUO D-Link. A command injection vulnerability exists in the DLINK DIR-825 REVB version 2.03, which originates from a failure to properly filter construct command special characters, commands, etc. in the CGl interface apcclientpin.cgi. A remote attacker...

FeMiner wms 安全漏洞

FeMiner wms is a warehouse management system for individual developers of Front End Miner FeMiner in China. A security vulnerability exists in FeMiner wms version 1.0, which stems from the inclusion of a SQL injection vulnerability...