- Description
- There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges.
- Source
- psirt@zte.com.cn
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zte:zxcloud_irai:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E5C0A67-F7F1-40F3-BC1A-0F4F67495FB0",
"versionEndExcluding": "7.23.32"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zte:zxcloud_irai:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "96352962-7748-44B8-9490-B95202771469"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]