CVE-2023-25648 (published 2023-12-14T06:46:39.187Z)

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.


Affected products: Vendor: ZTE
Product: ZXCLOUD iRAI
Versions: All versions up to V7.23.20