VYPR
Unrated severityNVD Advisory· Published Jan 9, 2026· Updated Jan 9, 2026

ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability

CVE-2025-66315

Description

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.

Affected products

2
  • Zte/MF258K Prollm-create
  • ZTE/MF258Kv5
    Range: ZTE_MF258kPRO_PLAY_V1.0.0B03

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.