PT-2025-11556 · Unknown+1 · Zxwt-Mig-P8G8V+4
Fizzl
·
Published
2025-03-17
·
Updated
2025-03-17
·
CVE-2025-2397
CVSS v2.0
2.2
Low
| Vector | AV:A/AC:L/Au:M/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
China Mobile P22g-CIac versions up to 20250305
ZXWT-MIG-P4G4V versions up to 20250305
ZXWT-MIG-P8G8V versions up to 20250305
GT3200-4G4P versions up to 20250305
GT3200-8G8P versions up to 20250305
Description
A vulnerability was found in the Telnet Service component, leading to improper authorization. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Recommendations
For China Mobile P22g-CIac versions up to 20250305, restrict access to the Telnet Service component to minimize the risk of exploitation.
For ZXWT-MIG-P4G4V versions up to 20250305, consider disabling the Telnet Service until a patch is available.
For ZXWT-MIG-P8G8V versions up to 20250305, avoid using the Telnet Service until the issue is resolved.
For GT3200-4G4P versions up to 20250305, restrict access to the Telnet Service component to minimize the risk of exploitation.
For GT3200-8G8P versions up to 20250305, consider disabling the Telnet Service until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
LPE
Improper Authorization
Incorrect Privilege Assignment
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
China Mobile P22G-Ciac
Gt3200-4G4P
Gt3200-8G8P
Zxwt-Mig-P4G4V
Zxwt-Mig-P8G8V