Security Advisory

CVE-2023-25651

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-14 07:03:54
Last updated 2024-08-02 11:25:19
Assigner zte
State PUBLISHED

Description

There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.