MF286R vulnerabilities

1 known vulnerability in MF286R from ZTE. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  MF286R: Improper Neutralization of Special Elements used in a Command

  CVE-2023-25649Aug 25, 2023ZTEEPSS 1.86%

  There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.