Approved changes feed: RSS · Atom

cpe:2.3:h:zte:mf258k_pro:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductMf258K Pro (66ca86c3-b7b3-5737-937b-7d489d62c46b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-66315 not_vulnerable 2026-06-08 07:41:18.732760 ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability
MEDIUM (4.3)
There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.
Published: 2026-01-09T02:24:58.971Z
Updated: 2026-01-09T14:49:28.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22065 not_vulnerable 2026-06-08 06:29:33.543943 ZTE MF258 Pro product has a OS Command injection vulnerability
MEDIUM (6.8)
There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
Published: 2024-10-29T01:58:29.002Z
Updated: 2024-10-29T13:29:22.586Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.