medium5.9
CVE-2023-25642
There is a buffer overflow vulnerability in some ZTE mobile internet producsts.
Impact
There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Mc801a Firmware | Version mc801a_elisa3_b19 |
| Zte | Mc801a1 Firmware | Version mc801a1_elisa1_b04 |