CVE-2023-25647

Permission and Access Control Vulnerability in Some ZTE Mobile Phones

State: Published
Severity: 4.7 Medium
Published: Aug 17, 2023
Updated: Oct 1, 2024
Reserved: Feb 9, 2023

Description

There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N	zte

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
Some ZTE Mobile PhonesZTE	NON_EEA_P870F21V1.0.0B01 through V1.0.0B07Affected GEN_ZTE_PQ82A01V1.0.0B01MR through V1.0.0B18MRAffected GEN_ZTE_P870A01V3.0.0B01 through V3.0.0B05Affected GEN_ZTE_P898A01V2.0.0B01 through V2.0.0B16Affected

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1032264

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.