ZTE MF286R FIRMWARE CR LVWRGBMF286RV1.0.0B04
Approved changes feed: RSS · Atom
cpe:2.3:o:zte:mf286r_firmware:cr_lvwrgbmf286rv1.0.0b04:*:*:*:*:*:*:*
part: o version: cr_lvwrgbmf286rv1.0.0b04 update: *
| Vendor | Zte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055) |
|---|---|
| Product | Mf286R Firmware (c21d057f-3704-58fb-ba77-ac9429380926) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-25651 |
vulnerable | 2026-06-08 05:56:09.601097 |
SQL Injection Vulnerability in Some ZTE Mobile Internet Products
MEDIUM (4.3)
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
Published: 2023-12-14T07:03:54.704Z
Updated: 2024-08-02T11:25:19.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25649 |
vulnerable | 2026-06-08 05:56:09.594391 |
OS Command Injection Vulnerability in a Mobile Internet Product of ZTE
MEDIUM (6.8)
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
Published: 2023-08-25T09:37:36.684Z
Updated: 2024-10-02T15:09:39.756Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.