Security Advisory

CVE-2023-25648

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-14 06:46:39
Last updated 2024-08-02 11:25:19
Assigner zte
State PUBLISHED

Description

There is a weak folder permission vulnerability in ZTEs ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.