CVE-2025-46582

{"id": "CVE-2025-46582", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-46582", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-27T15:58:07.247059Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@zte.com.cn", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "affected": [{"source": "psirt@zte.com.cn", "affectedData": [{"vendor": "ZTE", "product": "ZXMP M721", "versions": [{"status": "affected", "version": "ZXMPM721V5.30.020.001P01"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-27T09:15:37.793", "references": [{"url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2594779029512220847", "source": "psirt@zte.com.cn"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@zte.com.cn", "description": [{"lang": "en", "value": "CWE-321"}]}], "descriptions": [{"lang": "en", "value": "A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security."}, {"lang": "es", "value": "Una vulnerabilidad de divulgaci\u00f3n de clave privada existe en el producto ZXMP M721 de ZTE. Un usuario con pocos privilegios puede eludir las comprobaciones de autorizaci\u00f3n para ver la clave privada de comunicaci\u00f3n del dispositivo, lo que resulta en la exposici\u00f3n de la clave y afecta la seguridad de la comunicaci\u00f3n."}], "lastModified": "2026-10-08T11:10:00.250", "sourceIdentifier": "psirt@zte.com.cn"}