Description
There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ZTE | ZXCLOUD iRAI | All versions up to V7.23.20 – ≤ V7.23.20 | — |