Vulnerability index

Browse CVEs

162 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mf258 Firmware MEDIUM 6.1
CVE-2023-41781

There is a Cross-site scripting (XSS)  vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack wil…

Mitigation only
Fix from $1,600 2024-01-10
Redmagic 8 Pro Firmware MEDIUM 5.5
CVE-2023-41784

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

No fix yet
Fix from $1,600 2024-01-04
Zxcloud Irai HIGH 7.8
CVE-2023-41780

There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker co…

Fix: 7.23.32+
Fix from $1,950 2024-01-03
Zxcloud Irai HIGH 7.8
CVE-2023-41783

There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker co…

Fix: 7.23.32+
Fix from $1,950 2024-01-03
Zxcloud Irai MEDIUM 5.5
CVE-2023-41779

There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user…

Fix: 7.23.32+
Fix from $1,600 2024-01-03
Zxcloud Irai HIGH 7.8
CVE-2023-41776

There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to es…

Fix: 7.23.32+
Fix from $1,950 2024-01-03
Mc801a Firmware HIGH 8.8
CVE-2023-25643

There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters,…

Mitigation only
Fix from $1,950 2023-12-14
Mc801a Firmware HIGH 7.5
CVE-2023-25644

There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attack…

Mitigation only
Fix from $1,950 2023-12-14
Mc801a Firmware MEDIUM 6.5
CVE-2023-25642

There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticate…

Mitigation only
Fix from $1,600 2023-12-14
Mf833u1 Firmware HIGH 8.0
CVE-2023-25651

There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an auth…

Mitigation only
Fix from $1,950 2023-12-14
Zxcloud Irai HIGH 7.8
CVE-2023-25648

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileg…

Fix: 7.23.21+
Fix from $1,950 2023-12-14
Zxcloud Irai MEDIUM 6.5
CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker w…

Fix: 7.23.30+
Fix from $1,600 2023-12-14
Mf286r Firmware HIGH 8.8
CVE-2023-25649

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter,…

Mitigation only
Fix from $1,950 2023-08-25
Up T2 4k Firmware HIGH 7.7
CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application ca…

Mitigation only
Fix from $1,950 2023-06-16
Blade A52 Firmware HIGH 7.1
CVE-2022-39071

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite som…

Fix: 1.14 / 2.2+
Fix from $1,950 2023-05-30
Blade A52 Firmware HIGH 7.1
CVE-2022-39075

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some s…

Fix: 1.14 / 2.2+
Fix from $1,950 2023-05-30
Mf286r Firmware CRITICAL 9.8
CVE-2022-39073

There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerabi…

Mitigation only
Fix from $2,300 2023-01-06
Mf286r Firmware MEDIUM 5.4
CVE-2022-39072

There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP inter…

Mitigation only
Fix from $1,600 2023-01-06
Zxhn H108ns Firmware HIGH 7.5
CVE-2022-45957EPSS 11%

ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.

No fix yet
Fix from $1,950 2022-12-12
Otcp Firmware MEDIUM 6.5
CVE-2022-23143

ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions…

Fix: 2.21.40.06+
Fix from $1,600 2022-12-05
Zxa10 C350m Firmware CRITICAL 9.8
CVE-2022-39070

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulner…

Fix: 2.1.0xgp002.4+
Fix from $2,300 2022-11-22
Mf286r Firmware HIGH 8.8
CVE-2022-39066EPSS 27%

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authentic…

Mitigation only
Fix from $1,950 2022-11-22
Mf286r Firmware MEDIUM 6.5
CVE-2022-39067

There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacke…

Mitigation only
Fix from $1,600 2022-11-22
Zaip Aie MEDIUM 5.3
CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by build…

Fix: 8.22.02+
Fix from $1,600 2022-11-08
Zxa10 B76hv3 Firmware CRITICAL 9.1
CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to d…

Fix: after 2.01.02.01
Fix from $2,300 2022-09-23
Zxen Cg200 Firmware MEDIUM 5.3
CVE-2022-23142

ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short time, which can make the prod…

Fix: 1.0.0p1n6_m+
Fix from $1,600 2022-07-18
Zxmp M721 Firmware HIGH 7.5
CVE-2022-23141

ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled,…

Mitigation only
Fix from $1,950 2022-07-15
Mf297d Firmware HIGH 7.5
CVE-2022-23138

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may …

Mitigation only
Fix from $1,950 2022-06-09
Zxmp M721 Firmware HIGH 8.8
CVE-2022-23139

ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent w…

Mitigation only
Fix from $1,950 2022-05-12
Zxcdn Firmware MEDIUM 6.1
CVE-2022-23137

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user…

Mitigation only
Fix from $1,600 2022-05-11