ZeroHour

CVE-2025-66315

CVSS 3.1
8.8 high
EPSS
<1%p17
Published
()
Modified
Description

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.

Vendors
zte
Products
mf258k pro firmware
Weakness
CWE-269, CWE-863
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.