CVE-2023-41782

There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:zte:zxcloud_irai_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zte:zxcloud_irai:-:*:*:*:*:*:*:*

History

11 Jan 2024, 15:53

Type Values Removed Values Added
CWE CWE-427
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.8
References () https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032984 - () https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032984 - Vendor Advisory
CPE cpe:2.3:o:zte:zxcloud_irai_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zte:zxcloud_irai:-:*:*:*:*:*:*:*
First Time Zte zxcloud Irai Firmware
Zte
Zte zxcloud Irai

05 Jan 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-05 02:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-41782

Mitre link : CVE-2023-41782

CVE.ORG link : CVE-2023-41782


JSON object : View

Products Affected

zte

  • zxcloud_irai_firmware
  • zxcloud_irai
CWE
CWE-427

Uncontrolled Search Path Element

CWE-20

Improper Input Validation