Medium severity · published Dec 14, 2023
CVE-2023-25650
There is an arbitrary file download vulnerability in ZXCLOUD iRAI
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZI
Zxcloud Irai · Zte
before 7.23.30 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-25650
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-25650
Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032904
More from Zxcloud Irai
8.8
CVE-2024-22062
Permissions and Access Control Vulnerability in ZTE ZXCLOUD IRAI
8.1
CVE-2021-21731
A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a…
7.8
CVE-2026-44406
DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview
7.8
CVE-2026-40004
openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview
7.8
CVE-2023-41783
There is a command injection vulnerability of ZTE's ZXCLOUD iRAI