CVE-2023-41782: falha de baixa gravidade em ZTE ZXCLOUD iRAI
DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.9epss 0.2%
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L
Produtos afetados
ZTE · ZXCLOUD iRAICVEs relacionadas — ZTE ZXCLOUD iRAI
No mesmo produto, das mais perigosas para as menos.
CVE-2023-41783MEDIUMCommand Injection Vulnerability of ZTE's ZXCLOUD iRAIEPSS 0.6%CVE-2023-25650MEDIUMArbitrary File Download Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.6%CVE-2026-44407MEDIUMRemote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartviewEPSS 0.3%CVE-2023-41780MEDIUMUnsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2023-25648MEDIUMWeak Folder Permission Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2026-44406MEDIUMDLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartviewEPSS 0.2%