PT-2024-12969 · Zte · Zxcloud Irai

Published 2024-01-02 · Updated 2024-01-09 · CVE-2023-41779

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ZXCLOUD iRAI (affected versions not specified)

Description There is an illegal memory access issue in ZTE's ZXCLOUD iRAI product. When exploited by an attacker with common user permission, the physical machine will crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Buffer Overflow

Weakness Enumeration

CWE-863

CWE-119

Related Identifiers

CVE-2023-41779

Affected Products

Zxcloud Irai

References · 8

• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41779 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41779 · Vendor Advisory
• https://t.me/cvenotify/66001 · Telegram Post
• https://t.me/cibsecurity/74259 · Telegram Post
• https://twitter.com/CVEnew/status/1742366277853942150 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1742437577121042820 · Twitter Post
• https://t.me/cvenotify/66819 · Telegram Post