Skip to content
OpenAdvisories

Product · ZTE

MF286R

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2023-25649

    OS Command Injection Vulnerability in a Mobile Internet Product of ZTE

    There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

    ZTE MF286R