CVE-2023-25651mediumobserved exploitationCWE-20

CVE-2023-25651: medium-severity vulnerability in ZTE Mobile Internet Products

SQL Injection Vulnerability in Some ZTE Mobile Internet Products

Published · Updated

Follow this CVE+ Monitor Mobile Internet Products

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendcvss 4.3epss 0.3%
from disclosure to weapon
Published on NVDDec 14
VulnCheck+280d
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
ZTE · Mobile Internet Products