medium4.3
CVE-2025-66315
There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products.
Impact
There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Mf258k Pro Firmware | Versions zte_mf258kpro_play_v1.0.0b03, zte_mf258pro_std_v1.0.0b04 |