high7.7
CVE-2023-25645
There is a permission and access control vulnerability in some ZTE AndroidTV STBs.
Impact
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Up T2 4k Firmware | Version v84511302.1427 |
| Zte | Zxv10 B866v2-H Firmware | Versions v84711321.0038, v84711321.0040, v84711321.0045, v84711321.0049 |
| Zte | Zxv10 B866v2 Firmware | Versions v82811306.3021, v82815416.1027, v82815416.1028, v82815416.1029, v82815416.2012, v84711309.0016 |
| Zte | Zxv10 B860h V5d0 Firmware | Versions v83011303.0049, v83011303.0051, v83011303.0053, v83011303.0063, v83011303.0069 |
| Zte | Zxv10 B866v2f Firmware | Versions v86111338.0026, v86111338.0031, v86111338.0033, v86111338.0035 |