Zx297520V3
Approved changes feed: RSS · Atom
cpe:2.3:h:zte:zx297520v3:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Zte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055) |
|---|---|
| Product | Zx297520V3 (c386afd1-160d-51a3-9e30-846059aa4513) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40003 |
not_vulnerable | 2026-06-08 08:01:19.775668 |
USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM
MEDIUM (5.1)
ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow, bypassing the Secure Boot signature verification mechanism, and achieving unauthorized code execution.
Published: 2026-05-07T01:15:24.863Z
Updated: 2026-05-19T17:18:28.958Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.