PT-2025-43911 · Zte · Zxmp M721

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-46582

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXMP M721 (affected versions not specified)

Description A private key disclosure issue exists in the ZTE ZXMP M721 product. A user with low privileges can bypass authorization checks to view the device's communication private key, leading to key exposure and impacting communication security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-321

Related Identifiers

BDU:2025-13553

CVE-2025-46582

Affected Products

Zxmp M721

References · 5

• https://bdu.fstec.ru/vul/2025-13553 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46582 · Security Note
• https://t.me/cveNotify/140424 · Telegram Post
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2594779029512220847 · Note
• https://t.me/CVEtracker/35817 · Telegram Post