Eligold

**Name of the Vulnerable Software and Affected Versions** ZTE Z80 Ultra (affected versions not specified) **Description** A system interface permission verification defect exists where the interface lacks necessary access control. This allows an attacker to read relevant information by reflectively invoking the interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZTE Z80 Ultra (affected versions not specified) **Description** An information disclosure issue exists where third-party applications can access sensitive information by hooking system APIs. API hooking is a technique used to intercept function calls to modify or monitor the behavior of a program. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZTE Z80 Ultra (affected versions not specified) **Description** An interface permission validation issue exists where system-provided callable functions lack sufficient access control. This allows an attacker to utilize these functions to read sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZTE Z80 Ultra (affected versions not specified) **Description** An unauthorized information disclosure issue exists due to insufficient access control for methods within the framework. This allows an attacker to read device-related information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZTE Z80 Ultra (affected versions not specified) **Description** A local information disclosure issue exists where third-party applications can capture data returned by system interfaces to obtain device-related information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZTE Z80 Ultra (affected versions not specified) **Description** System interfaces lack robust invocation authentication and have inadequate access control. This allows third-party applications to use reflection—a process that allows a program to inspect and modify its own structure and behavior at runtime—to call these interfaces and retrieve sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Z80Ultra (NX741J) (affected versions not specified) **Description** Non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field `factory mac address` in the Settings.Secure database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.