CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-25649
Severity
MEDIUM
CVSS
6.8
EPSS
1.58%
Original NVD Description
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
Related CVEs
Other vulnerabilities affecting the same vendor(s)