MC801A vulnerabilities

2 known vulnerabilities in MC801A from ZTE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MC801A: Improper Handling of Exceptional Conditions

  CVE-2023-25644Dec 14, 2023ZTE

  There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could use the vulnerability to perform a denial of service attack.

• 8.8 High severity

  MC801A: Improper Neutralization of Special Elements used in a Command

  CVE-2023-25643Dec 14, 2023ZTEEPSS 1.77%

  There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an authenticated attacker could use the vulnerability to execute arbitrary commands.