CVE-2023-41780: falha de média gravidade em ZTE ZXCLOUD iRAI
Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 0.2%
There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ZTE · ZXCLOUD iRAICVEs relacionadas — ZTE ZXCLOUD iRAI
No mesmo produto, das mais perigosas para as menos.
CVE-2023-41783MEDIUMCommand Injection Vulnerability of ZTE's ZXCLOUD iRAIEPSS 0.6%CVE-2023-25650MEDIUMArbitrary File Download Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.6%CVE-2026-44407MEDIUMRemote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartviewEPSS 0.3%CVE-2023-25648MEDIUMWeak Folder Permission Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2023-41782LOWDLL Hijacking Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2026-44406MEDIUMDLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartviewEPSS 0.2%