7.7

CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zte ≫ Up T2 4k Firmware Version v84511302.1427
   Zte ≫ Up T2 4k Version -
Zte ≫ Zxv10 B866v2-h Firmware Version v84711321.0038
   Zte ≫ Zxv10 B866v2-h Version -
Zte ≫ Zxv10 B866v2-h Firmware Version v84711321.0040
   Zte ≫ Zxv10 B866v2-h Version -
Zte ≫ Zxv10 B866v2-h Firmware Version v84711321.0045
   Zte ≫ Zxv10 B866v2-h Version -
Zte ≫ Zxv10 B866v2-h Firmware Version v84711321.0049
   Zte ≫ Zxv10 B866v2-h Version -
Zte ≫ Zxv10 B866v2 Firmware Version v82811306.3021
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v82815416.1027
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v82815416.1028
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v82815416.1029
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v82815416.2012
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v84711309.0016
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v84711309.0018
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B866v2 Firmware Version v84711309.0019
   Zte ≫ Zxv10 B866v2 Version -
Zte ≫ Zxv10 B860h V5d0 Firmware Version v83011303.0049
   Zte ≫ Zxv10 B860h V5d0 Version -
Zte ≫ Zxv10 B860h V5d0 Firmware Version v83011303.0051
   Zte ≫ Zxv10 B860h V5d0 Version -
Zte ≫ Zxv10 B860h V5d0 Firmware Version v83011303.0053
   Zte ≫ Zxv10 B860h V5d0 Version -
Zte ≫ Zxv10 B860h V5d0 Firmware Version v83011303.0063
   Zte ≫ Zxv10 B860h V5d0 Version -
Zte ≫ Zxv10 B860h V5d0 Firmware Version v83011303.0069
   Zte ≫ Zxv10 B860h V5d0 Version -
Zte ≫ Zxv10 B866v2f Firmware Version v86111338.0026
   Zte ≫ Zxv10 B866v2f Version -
Zte ≫ Zxv10 B866v2f Firmware Version v86111338.0031
   Zte ≫ Zxv10 B866v2f Version -
Zte ≫ Zxv10 B866v2f Firmware Version v86111338.0033
   Zte ≫ Zxv10 B866v2f Version -
Zte ≫ Zxv10 B866v2f Firmware Version v86111338.0035
   Zte ≫ Zxv10 B866v2f Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.177
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.7 2.5 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA-ADP 7.7 2.5 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1031464
Vendor Advisory