High severity8.4NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026
CVE-2023-25643
CVE-2023-25643
Description
There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ZTE/MC801Av5Range: MC801A_Elisa3_B19
- ZTE/MC801A1v5Range: MC801A1_Elisa1_B04
Patches
Vulnerability mechanics
References
1- support.zte.com.cn/support/news/LoopholeInfoDetail.aspxnvdVendor Advisory
News mentions
0No linked articles in our index yet.