CVE Vulnerabilities

CVE-2023-25646

Improper Preservation of Permissions

Published: Jun 20, 2024 | Modified: Jan 28, 2025
CVSS 3.x
6.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations.

Weakness

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

Affected Software

Name Vendor Start Version End Version
Zxhn_h388x_firmware Zte 10.1_agzhm_1.3.1 (including) 10.1_agzhm_1.3.1 (including)

References