Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-41783 EUVD-2023-46275GHSA-hg8w-h7xj-9m5w

Command Injection Vulnerability of ZTE's ZXCLOUD iRAI

Published Jan 3, 2024 · Updated Apr 17, 2025 · Assigned by zte

Description

There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.

Affected products

VendorProductAffectedFixed
ZTE ZXCLOUD iRAI All versions up to 7.22.11P2 – ≤ 7.22.11P2 —

References