CVE-2023-41779 Illegal Memory Access Vulnerability of ZTE's ZXCLOUD iRAI

There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed...

ZTE ZXCLOUD iRAI Security Vulnerability

ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.23.31 and earlier versions. An attacker can exploit the vulnerability to create fake processes to elevate privileges...

ZTE ZXCLOUD iRAI Security Vulnerability

ZTE ZXCLOUD iRAI is a virtualization appliance from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.23.21 and prior versions, which stems from the presence of an illegal memory access issue. An attacker exploiting this vulnerability could cause a physical...

ZTE ZXCLOUD iRAI Code Injection Vulnerability

The ZTE ZXCLOUD iRAI is a virtualization appliance from China's ZTE Corporation ZTE. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.22.11P2 and prior versions, which stems from the program's inability to adequately validate user input. An attacker can exploit the vulnerability to...

CVE-2023-41783: Improper Control of Generation of Code

There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges...

CVE-2023-41780: Improper Limitation of a Pathname to a Restricted Directory

There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges...

CVE-2023-41779: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed...

CVE-2023-41776: Incorrect Permission Assignment for Critical Resource

There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate local privileges...

ZTE ZXCLOUD iRAI Code Issue Vulnerability

The ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.23.23 and prior versions, which stems from the program's inability to adequately validate user input. An attacker can exploit the vulnerability to elevate...

PT-2024-12973 · Zxcloud · Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZXCLOUD iRAI affected versions not specified Description: There is a command injection vulnerability due to the program's failure to adequately validate the user's input, allowing an attacker to exploit this issue to escalate local privileges...

PT-2024-12968 · Zte · Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZXCLOUD iRAI affected versions not specified Description: There is a local privilege escalation issue in ZTE's ZXCLOUD iRAI. Attackers with regular user privileges can create a fake process to escalate local privileges. Recommendations: At th...

PT-2024-12970

Name of the Vulnerable Software and Affected Versions ZTE ZXCLOUD iRAI affected versions not specified Description The issue is related to an unsafe DLL loading vulnerability. It occurs because the program fails to adequately validate the user's input, allowing an attacker to exploit this...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

CVE-2023-25648

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges...

CVE-2023-25648

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

Command injection

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges...

Arbitrary file deletion

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

CVE-2023-25650

CVE-2023-25650 affects ZTE ZXCLOUD iRAI, where the backend fails to escape special strings or restrict paths in the download interface, enabling an attacker with user permissions to modify a request parameter and trigger arbitrary file downloads. The vulnerability is rooted in improper input hand...

CVE-2023-25650 Arbitrary File Download Vulnerability in ZTE ZXCLOUD iRAI

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...