CVE-2023-25646CWE-281

Permission and Access Control Vulnerability in ZTE H388X

High · published June 20, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2024-06-20T06:20Z
EPSS history
Timeline
  • 20 JUN 06:20Z
    Permission and Access Control Vulnerability in ZTE H388X
    cvelistv5