Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-41783

There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.

Published

2024-01-03T02:15:43.573

Last Modified

2025-01-28T15:36:03.663

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-94
  • Type: Primary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zte zxcloud_irai < 7.23.32 Yes
Application zte zxcloud_irai - No
References