Medium severity4.3NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026
CVE-2023-25651
CVE-2023-25651
Description
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- ZTE/Mobile Internet Productsv5Range: BD_MF833U1V1.0.0B01
Patches
Vulnerability mechanics
References
1- support.zte.com.cn/support/news/LoopholeInfoDetail.aspxnvdVendor Advisory
News mentions
0No linked articles in our index yet.