CVE-2025-2397
China Mobile P22g-CIac Telnet Service improper authorization
- State
- Published
- Severity
- 4.8 Medium
- Published
- Mar 17, 2025
- Updated
- Mar 18, 2025
- Reserved
- Mar 17, 2025
Description
A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305. It has been declared as problematic. This vulnerability affects unknown code of the component Telnet Service. The manipulation leads to improper authorization. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 2.4 Low | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 2.4 Low | CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 2.2 Low | AV:A/AC:L/Au:M/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
P22g-CIacChina Mobile |
|
ZXWT-MIG-P4G4VChina Mobile |
|
ZXWT-MIG-P8G8VChina Mobile |
|
GT3200-4G4PChina Mobile |
|
GT3200-8G8PChina Mobile |
|
References
- VDB-299896 | China Mobile P22g-CIac Telnet Service improper authorizationvdb-entry
- VDB-299896 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #514957 | China Mobile Internet of Things Enterprise Gateway GT3200-8G8P;GT3200-4G4P;ZXWT-MIG-P8G8V;ZXWT-MIG-P4G4V;P22g-CIac Execution of unauthorized commandthird-party-advisory
- https://github.com/Fizz-L/Vulnerability-report/blob/main/Unauthorized%20access%20to%20execute%20the%20telnet%20command.mdexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.