ZTE ZXCLOUD iRAI Vulnerability Advisory: CVE-2023-41779, 41780, 41776, 41783

From this web page screenshot, the following key vulnerability information can be obtained: Vulnerability IDs and Descriptions: - CVE-2023-41779: Unauthorized memory access vulnerability. Attackers can exploit this vulnerability to trigger a crash. - CVE-2023-41780: Unsafe DLL loading vulnerability. Attackers can escalate local privileges. - CVE-2023-41776: Local privilege escalation vulnerability. Attackers can create fake processes and escalate privileges. - CVE-2023-41783: Command injection vulnerability. Attackers can escalate local privileges. CVSS 3.1 Base Scores: - CVE-2023-41779: 4.4 Medium - CVE-2023-41780: 6.4 Medium - CVE-2023-41776: 6.7 Medium - CVE-2023-41783: 4.3 Medium Affected Products and Fixes: - Product Name: ZXCLOUD iRAI - CVE-2023-41779: Affects all versions up to 7.23.21, fixed in version 7.23.32 - CVE-2023-41780: Affects all versions up to 7.23.23 - CVE-2023-41776: Affects all versions up to 7.23.31 - CVE-2023-41783: Affects all versions up to 7.22.11P2 Acknowledgement: ZTE thanks Zhao RunZhi for their attention and collaboration on the product, and for assisting in disclosing this vulnerability. Update Records: - January 3, 2024: Initial release. Version Update Method: Devices that support automatic updates will receive pop-up messages notifying users of available updates. If no update message is received, please contact the supplier for update information. Global Customer Support Center: - http://support.zte.com.cn/support/web/Contact.aspx?_langType=en

Goal Reached Thanks to every supporter — we hit 100%!

ZTE ZXCLOUD iRAI Vulnerability Advisory: CVE-2023-41779, 41780, 41776, 41783