{"id":"CVE-2023-41780","aliases":["EUVD-2023-46272","GHSA-v684-r2rv-g645"],"status":"published","title":"Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI","description":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00221,"percentile":0.12731,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-427"],"published":"2024-01-03T01:52:10Z","modified":"2026-06-17T06:22:47Z","products":[{"vendor":"zte","product":"zxcloud irai"},{"vendor":"zte","product":"zxcloud_irai"},{"vendor":"zte","product":"zxcloud_irai_firmware"}],"references":[{"url":"https://https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404","tags":["x_transferred","Broken Link","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41780"},{"url":"https://github.com/advisories/GHSA-v684-r2rv-g645"}],"sources":{"cve":[{"id":"CVE-2023-41780","title":"Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI","description":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.\n\n\n","status":"published","published":"2024-01-03T01:52:10.749Z","modified":"2024-09-06T17:48:21.97Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:18.88314Z"}],"euvd":[{"id":"EUVD-2023-46272","description":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.\n\n\n","status":"published","published":"2024-01-03T01:52:10Z","modified":"2024-09-06T17:48:21Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:56:01.652315Z"}],"ghsa":[{"id":"GHSA-v684-r2rv-g645","title":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to...","description":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.\n\n\n","status":"published","published":"2024-01-03T03:30:33Z","modified":"2024-01-09T21:30:34Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-22","CWE-427"],"updated_at":"2026-11-02T14:55:22.936224Z"}],"nvd":[{"id":"CVE-2023-41780","description":"There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.\n\n\n","status":"published","published":"2024-01-03T02:15:43.403Z","modified":"2026-06-17T06:22:47.957Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-22","CWE-427"],"updated_at":"2026-11-02T14:08:59.830468Z"}]}}