title: Illegal Memory Access Vulnerability of ZTE's ZXCLOUD iRAI
description: There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permission, the physical machine will be crashed.
problem types: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
affected:
{
defaultStatus: unaffected
platforms: Windows
product: ZXCLOUD iRAI
vendor: ZTE
versions:
lessThanOrEqual: 7.23.21, status: affected, version: ZTE iRAI 7.23.21 or later, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: 7.23.32