CVE-2023-25645

zte up t2 4k firmware, zte zxv10 b866v2-h firmware, zte zxv10 b866v2 firmware +2 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-25645

Katalog CVE

CVSS 7.7 · High EPSS 0,27%

Kerentanan Incorrect Default Permissions pada zte up t2 4k firmware, zte zxv10 b866v2-h firmware +3 lainnya. Skor CVSS 3.1 7.7 (High) menurut NVD.

Deskripsi (NVD)

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.

Rincian

Terbit di NVD
16 Juni 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.7 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-276: Incorrect Default Permissions
EPSS (30 hari)
0,27% peluang dieksploitasi; lebih tinggi dari 17,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zte up t2 4k firmware Versi v84511302.1427
zte zxv10 b866v2-h firmware Versi v84711321.0038
zte zxv10 b866v2-h firmware Versi v84711321.0040
zte zxv10 b866v2-h firmware Versi v84711321.0045
zte zxv10 b866v2-h firmware Versi v84711321.0049
zte zxv10 b866v2 firmware Versi v82811306.3021
zte zxv10 b866v2 firmware Versi v82815416.1027
zte zxv10 b866v2 firmware Versi v82815416.1028
zte zxv10 b866v2 firmware Versi v82815416.1029
zte zxv10 b866v2 firmware Versi v82815416.2012
zte zxv10 b866v2 firmware Versi v84711309.0016
zte zxv10 b866v2 firmware Versi v84711309.0018
zte zxv10 b866v2 firmware Versi v84711309.0019
zte zxv10 b860h v5d0 firmware Versi v83011303.0049
zte zxv10 b860h v5d0 firmware Versi v83011303.0051
zte zxv10 b860h v5d0 firmware Versi v83011303.0053
zte zxv10 b860h v5d0 firmware Versi v83011303.0063
zte zxv10 b860h v5d0 firmware Versi v83011303.0069
zte zxv10 b866v2f firmware Versi v86111338.0026
zte zxv10 b866v2f firmware Versi v86111338.0031
zte zxv10 b866v2f firmware Versi v86111338.0033
zte zxv10 b866v2f firmware Versi v86111338.0035

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.