VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026

CVE-2025-66315

CVE-2025-66315

Description

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.

Affected products

4
  • Zte/Mf258k Pro Firmware2 versions
    cpe:2.3:o:zte:mf258k_pro_firmware:zte_mf258kpro_play_v1.0.0b03:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:zte:mf258k_pro_firmware:zte_mf258kpro_play_v1.0.0b03:*:*:*:*:*:*:*
    • cpe:2.3:o:zte:mf258k_pro_firmware:zte_mf258pro_std_v1.0.0b04:*:*:*:*:*:*:*
  • Zte/MF258K Prollm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: ZTE_MF258kPRO_PLAY_V1.0.0B03

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.