ZTE MF258K Pro Directory Permission Vulnerability in Version Server

A configuration defect vulnerability has been identified in the version server of ZTE MF258K Pro products. This vulnerability arises from improper directory permission settings, allowing an attacker to execute write permissions in a specific directory.

Impact

Exploitation of this vulnerability could lead to unauthorized write access in a designated directory, potentially allowing for the modification or addition of files.

Remediation

Users can upgrade to ZTE_MF258kPRO_PLAY_V1.0.0B05 or ZTE_MF258PRO_STD_V1.0.0B05. For the upgraded version, please contact the ZTE Global Customer Support Center.