Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-25644 EUVD-2023-29583GHSA-2m47-7r27-xh85

Denial of Service Vulnerability in Some ZTE Mobile Internet Products

Published Dec 14, 2023 · Updated May 22, 2025 · Assigned by zte

Description

There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack.

Affected products

VendorProductAffectedFixed
ZTE MC801A MC801A_Elisa3_B19 – ≤ B19 —
ZTE MC801A1 MC801A1_Elisa1_B04 – ≤ B04 —

References