medium6.5
CVE-2023-25648
There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product.
Impact
There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxcloud Irai | before 7.23.21 |