Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-66315 EUVD-2026-1815GHSA-q363-5cqv-4f8m

ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability

Published Jan 9, 2026 · Updated Jan 9, 2026 · Assigned by zte

Description

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.

Affected products

VendorProductAffectedFixed
ZTE MF258K ZTE_MF258kPRO_PLAY_V1.0.0B03, ZTE_MF258PRO_STD_V1.0.0B04 —

References