TI-2023-10926 Aliases CVE-2023-25645 GHSA-h8gg-wpx7-r4g9

Incorrect default permissions in UP T2 4K, ZXV10 B866V2-H, ZXV10 B866V2, ZXV10 B860H…

LOW 35CWE-276Published 2023-06-16 · Updated 2024-12-12

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and applications on the user's device, affecting device operation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00266 18th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	UP T2 4K, ZXV10 B866V2-H, ZXV10 B866V2, ZXV10 B860H V5D0, ZXV10 B866V2F	V84511302.1427,V84711321.0038,V84711321.0040,V84711321.0045,V84711321.0049,V82811306.3021,V84711309.0016,V84711309.0018,V84711309.0019,V82815416.1027,V82815416.1028,V82815416.1029,V82815416.2012,V83011303.0049,V83011303.0051,V83011303.0053,V83011303.0063,V83011303.0069,V86111338.0026,V86111338.0031,V86111338.0033,V86111338.0035	—	No fix listed	CNA

UP T2 4K, ZXV10 B866V2-H, ZXV10 B866V2, ZXV10 B860H V5D0, ZXV10 B866V2F Vendor— Affected V84511302.1427,V84711321.0038,V84711321.0040,V84711321.0045,V84711321.0049,V82811306.3021,V84711309.0016,V84711309.0018,V84711309.0019,V82815416.1027,V82815416.1028,V82815416.1029,V82815416.2012,V83011303.0049,V83011303.0051,V83011303.0053,V83011303.0063,V83011303.0069,V86111338.0026,V86111338.0031,V86111338.0033,V86111338.0035 Fixed in — No fix listed CNA

CPE configurations NVD · 27

CPE	Versions	Role	Vendor
cpe:2.3:o:zte:up_t2_4k_firmware:v84511302.1427:::::::*	v84511302.1427	Vulnerable	ZTE
cpe:2.3:h:zte:up_t2_4k:-:::::::*	not specified by NVD	Running on	ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0038:::::::*	v84711321.0038	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0040:::::::*	v84711321.0040	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0045:::::::*	v84711321.0045	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0049:::::::*	v84711321.0049	Vulnerable	ZTE
cpe:2.3:h:zte:zxv10_b866v2-h:-:::::::*	not specified by NVD	Running on	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82811306.3021:::::::*	v82811306.3021	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.1027:::::::*	v82815416.1027	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.1028:::::::*	v82815416.1028	Vulnerable	ZTE

cpe:2.3:o:zte:up_t2_4k_firmware:v84511302.1427:*:*:*:*:*:*:* Versions v84511302.1427 Vulnerable ·ZTE
cpe:2.3:h:zte:up_t2_4k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0038:*:*:*:*:*:*:* Versions v84711321.0038 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0040:*:*:*:*:*:*:* Versions v84711321.0040 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0045:*:*:*:*:*:*:* Versions v84711321.0045 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2-h_firmware:v84711321.0049:*:*:*:*:*:*:* Versions v84711321.0049 Vulnerable ·ZTE
cpe:2.3:h:zte:zxv10_b866v2-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82811306.3021:*:*:*:*:*:*:* Versions v82811306.3021 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.1027:*:*:*:*:*:*:* Versions v82815416.1027 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.1028:*:*:*:*:*:*:* Versions v82815416.1028 Vulnerable ·ZTE

Show 17 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.1029:::::::*	v82815416.1029	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.2012:::::::*	v82815416.2012	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v84711309.0016:::::::*	v84711309.0016	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v84711309.0018:::::::*	v84711309.0018	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v84711309.0019:::::::*	v84711309.0019	Vulnerable	ZTE
cpe:2.3:h:zte:zxv10_b866v2:-:::::::*	not specified by NVD	Running on	ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0049:::::::*	v83011303.0049	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0051:::::::*	v83011303.0051	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0053:::::::*	v83011303.0053	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0063:::::::*	v83011303.0063	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0069:::::::*	v83011303.0069	Vulnerable	ZTE
cpe:2.3:h:zte:zxv10_b860h_v5d0:-:::::::*	not specified by NVD	Running on	ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0026:::::::*	v86111338.0026	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0031:::::::*	v86111338.0031	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0033:::::::*	v86111338.0033	Vulnerable	ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0035:::::::*	v86111338.0035	Vulnerable	ZTE
cpe:2.3:h:zte:zxv10_b866v2f:-:::::::*	not specified by NVD	Running on	ZTE

cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.1029:*:*:*:*:*:*:* Versions v82815416.1029 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v82815416.2012:*:*:*:*:*:*:* Versions v82815416.2012 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v84711309.0016:*:*:*:*:*:*:* Versions v84711309.0016 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v84711309.0018:*:*:*:*:*:*:* Versions v84711309.0018 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2_firmware:v84711309.0019:*:*:*:*:*:*:* Versions v84711309.0019 Vulnerable ·ZTE
cpe:2.3:h:zte:zxv10_b866v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0049:*:*:*:*:*:*:* Versions v83011303.0049 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0051:*:*:*:*:*:*:* Versions v83011303.0051 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0053:*:*:*:*:*:*:* Versions v83011303.0053 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0063:*:*:*:*:*:*:* Versions v83011303.0063 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b860h_v5d0_firmware:v83011303.0069:*:*:*:*:*:*:* Versions v83011303.0069 Vulnerable ·ZTE
cpe:2.3:h:zte:zxv10_b860h_v5d0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0026:*:*:*:*:*:*:* Versions v86111338.0026 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0031:*:*:*:*:*:*:* Versions v86111338.0031 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0033:*:*:*:*:*:*:* Versions v86111338.0033 Vulnerable ·ZTE
cpe:2.3:o:zte:zxv10_b866v2f_firmware:v86111338.0035:*:*:*:*:*:*:* Versions v86111338.0035 Vulnerable ·ZTE
cpe:2.3:h:zte:zxv10_b866v2f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ZTE

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-25645
2026-10-03 Alias added: GHSA-h8gg-wpx7-r4g9

References

Advisory 1

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1031464

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences