CVE-2026-44409

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343342	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:zte:mu5250_firmware:1.0.0b27:*:*:*:*:*:*:*

cpe:2.3:h:zte:mu5250:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-05-22 05:16

Updated : 2026-07-23 16:10

NVD link : CVE-2026-44409

Mitre link : CVE-2026-44409

CVE.ORG link : CVE-2026-44409

JSON object : View

Products Affected

zte

mu5250_firmware
mu5250

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-862

Missing Authorization

{"id": "CVE-2026-44409", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44409", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-22T13:47:06.737611Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@zte.com.cn", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@zte.com.cn", "affectedData": [{"vendor": "ZTE", "product": "MU5250", "versions": [{"status": "affected", "version": "BD_FLYMODEMMU5250V1.0.0B27"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-22T05:16:26.350", "references": [{"url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343342", "tags": ["Vendor Advisory"], "source": "psirt@zte.com.cn"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@zte.com.cn", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure."}, {"lang": "es", "value": "Existe una vulnerabilidad de revelaci\u00f3n de informaci\u00f3n en ZTE MU5250. Debido a una configuraci\u00f3n incorrecta del mecanismo de control de acceso, los atacantes pueden obtener informaci\u00f3n sin autorizaci\u00f3n, causando el riesgo de revelaci\u00f3n de informaci\u00f3n."}], "lastModified": "2026-07-23T16:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zte:mu5250_firmware:1.0.0b27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEB27476-B25E-4A59-A6A4-2849EE48B757"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zte:mu5250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C007E6FD-A7A7-49E9-8957-45FA167F9784"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@zte.com.cn"}