SQL Injection Vulnerability in Some ZTE Mobile Internet Products
35Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendcvss 4.3epss 0.3%
from disclosure to weapon
Published on NVDDec 14
VulnCheck+280d
exploitation probability
0.3%top 72% of all CVEs
observed exploitation
yesVulnCheck
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
ZTE · Mobile Internet Products