7.7
Élevée
CVE-2023-25645 There is a permission and access control vulnerability in some ZTE AndroidTV STBs
Description
There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UP T2 4K, ZXV10 B866V2-H, ZXV10 B866V2, ZXV10 B860H V5D0, ZXV10 B866V2F | Versions non publiées |