ZTE MC801A Firmware vulnerabilities

3 CVEs affecting ZTE MC801A Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25644, published 2023-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-25643, published 2023-12-14. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the…
CVE-2023-25644, published 2023-12-14. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a…
CVE-2023-25642, published 2023-12-14. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform…