mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-05 19:06:36 +02:00
836 B
836 B
CVE-2023-25649
Description
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.
POC
Reference
No PoCs from references.