Denial of Service Vulnerability in Some ZTE Mobile Internet Products
CVE-2023-25644

6.5MEDIUM

Key Information:

Vendor

ZTE

Status
MC801A
MC801A1
Vendor
CVE Published:
14 December 2023

What is CVE-2023-25644?

There is a denial of service vulnerability in some ZTEĀ mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack.

Affected Version(s)

MC801A Linux MC801A_Elisa3_B19

MC801A1 Linux MC801A1_Elisa1_B04

References

https://support.zte.com.cn/support/news/LoopholeInfoDetai...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.