CVE-2023-25644: Denial of Service Vulnerability in Some ZTE Mobile Internet Products

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-14 · updated 2026-06-17
Weakness: CWE-755

Description

There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack.

Affected products

ZTE Mc801A1 Firmware: mc801a1_elisa1_b04
ZTE Mc801A Firmware: mc801a_elisa3_b19

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032624
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032624

Get alerted when CVE-2023-25644 or the next vulnerability affects your stack