CVSS 3.1
7.7 highCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HCVE-2023-25645
High (7.7) in zte. EPSS 0.3% chance of exploitation in the next 30 days.
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
- CWE
- CWE-276
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zte:up_t2_4k_firmware
- zte:zxv10_b860h_v5d0_firmware
- zte:zxv10_b866v2-h_firmware
- zte:zxv10_b866v2_firmware
- zte:zxv10_b866v2f_firmware