MF286R vulnerabilities
We track 2 vulnerabilities in MF286R products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 6, 2023.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest MF286R vulnerabilities
- 9.8 Critical severity
MF286R: Improper Neutralization of Special Elements used in a Command
There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands.
- 8.8 High severity
MF286R: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.