Approved changes feed: RSS · Atom

cpe:2.3:a:zte:mf286r:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductMf286R (1e88feda-e9f6-53e2-bae0-eec2fdf28cd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25649 vulnerable 2026-06-08 05:56:09.595102 OS Command Injection Vulnerability in a Mobile Internet Product of ZTE
MEDIUM (6.8)
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
Published: 2023-08-25T09:37:36.684Z
Updated: 2024-10-02T15:09:39.756Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.