PT-2023-20205 · Zte · Zte Mobile Internet Product
CVE-2023-25644
·
Publicado
2023-12-14
·
Atualizado
2024-01-18
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ZTE mobile internet products (affected versions not specified)
Description
The issue is related to a denial of service vulnerability in ZTE mobile internet products. It is caused by insufficient validation of the Web interface parameter, allowing an attacker to perform a denial of service attack. An unauthenticated local attacker can exploit this to cause a denial-of-service situation on the affected ZTE router.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Handling of Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Zte Mobile Internet Product