Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-66315

ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zte
Products
Mf258 Mf258k Pro Mf258k Pro Firmware
CVE-2023-41781

XSS Vulnerability in ZTE MF258 Products

There is a Cross-site scripting (XSS)  vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack will be triggered.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Zte
Products
Mf258 Mf258 Firmware
CVE-2024-22065

ZTE MF258 Pro product has a OS Command injection vulnerability

There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.

CVSS 3.1 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Zte
Products
Mf258 Pro Firmware Mf258k Pro Mf258k Pro Firmware