DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI
CVE-2023-41782
4.8MEDIUM
What is CVE-2023-41782?
A DLL hijacking vulnerability has been identified in ZTE's ZXCLOUD iRAI, enabling attackers to potentially exploit system weaknesses by placing a malicious dynamic link library (DLL) file in designated directories. This flaw allows unauthorized execution of harmful code, which could compromise the integrity and security of affected systems. Organizations using ZTE ZXCLOUD iRAI should immediately review their security measures to mitigate potential risks associated with this vulnerability.
Affected Version(s)
ZXCLOUD iRAI Windows All versions up to V7.01.04P1_1104
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
