Command Injection Vulnerability in ZTE's ZXCLOUD iRAI

Command Injection Vulnerability in ZTE's ZXCLOUD iRAI

CVE-2023-41783 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.

Learn more about our Cloud Audit.