title: Arbitrary File Download Vulnerability in ZTE ZXCLOUD iRAI
description:
There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
platforms: Windows
product: ZXCLOUD iRAI
vendor: ZTE
versions:
lessThanOrEqual: V7.23.23, status: affected, version: All versions up to V7.23.23, versionType: V7.23.23
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: ZXCLOUD iRAI V7.23.30