CVE-2023-25648: Weak Folder Permission Vulnerability in ZTE ZXCLOUD iRAI

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-14 · updated 2026-06-17
Weakness: CWE-732

Description

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL to execute command to escalate local privileges.

Affected products

ZTE ZXCLOUD iRAI: before 7.23.21 — fixed in 7.23.21

How to fix

Upgrade to a fixed version: ZTE ZXCLOUD iRAI 7.23.21. Check the vendor advisory for mitigations.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032584
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032584

Get alerted when CVE-2023-25648 or the next vulnerability affects your stack