← Database

CVE-2023-25645

HIGH CVSS: 7.7 Published: 2023-06-16 Modified: 2026-06-17

Description

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.

Affected Platforms

Zte Up T2 4KZte Zxv10 B866V2 FirmwareZte Up T2 4K FirmwareZte Zxv10 B866V2-HZte Zxv10 B866V2-H FirmwareZte Zxv10 B866V2Zte Zxv10 B866V2FZte Zxv10 B860H V5D0 FirmwareZte Zxv10 B860H V5D0Zte Zxv10 B866V2F Firmware

Weakness Type

CWE-276, CWE-276

References