Two Vulnerabilities in Some ZTE Mobile Internet Products

CVE-2023-25643

What is CVE-2023-25643?

A command injection vulnerability exists in several ZTE mobile internet products stemming from inadequate input validation across various network parameters. This flaw could allow an authenticated attacker to execute arbitrary commands on the affected devices, potentially compromising their integrity and security. Ensuring proper validation of all input fields is critical to mitigating this risk.

References