Security Advisory

CVE-2023-25648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-12-14 06:46:39

Last updated 2024-08-02 11:25:19

Assigner zte

CVSS score 6.5

State PUBLISHED

Description

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.

← Browse all CVEs View on cve.org ↗