Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-25642 EUVD-2023-29581GHSA-q3f5-cm95-p5vp

Two Vulnerabilities in Some ZTE Mobile Internet Products

Published Dec 14, 2023 · Updated Aug 2, 2024 · Assigned by zte

Description

There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack. 

Affected products

VendorProductAffectedFixed
ZTE MC801A MC801A_Elisa3_B19 – ≤ B19 —
ZTE MC801A1 MC801A1_Elisa1_B04 – ≤ B04 —

References