PT-2025-10033 · Zte · Ztelink

Published 2025-03-07 · Updated 2025-03-07 · CVE-2025-26708

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZTELink version 5.4.9

Description The issue is caused by a flaw in the WiFi parameter configuration, allowing an attacker to obtain unauthorized access to the WiFi service.

Recommendations For ZTELink version 5.4.9, consider restricting access to the WiFi configuration parameters until a patch is available.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2025-26708

Affected Products

Ztelink

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26708 · Security Note
• https://t.me/cvedetector/19782 · Telegram Post
• https://twitter.com/CVEnew/status/1897878628697776518 · Twitter Post
• https://t.me/cvenotify/113779 · Telegram Post
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/5666152569221570580 · Note