CVE-2023-25647
Medium
Description
There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor the touch event.
SeverityMedium
CVSS4.7
Exploit probability—
ProductZte Axon 30 Firmware
PublishedAug 17, 2023
First seenAug 17, 2023
Weakness typeCWE-269Improper privilege management
How to fix
Update
- zte axon_30_firmware3.0.0b06 or later
- zte axon_40_pro_firmware1.0.0b16 or later
- zte axon_40_ultra_firmware2.0.0b17 or later
- zte nubia_z50_firmware1.0.0b19mr or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zte axon_30_firmware | v < 3.0.0b06 | 3.0.0b06 |
| zte axon_40_pro_firmware | v < 1.0.0b16 | 1.0.0b16 |
| zte axon_40_ultra_firmware | v < 2.0.0b17 | 2.0.0b17 |
| zte nubia_z50_firmware | v < 1.0.0b19mr | 1.0.0b19mr |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.