CVE-2025-46582

HighCVSS 7.7/10Last modified Oct 8, 2026

Description

A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-321

Affected software

VendorProductVersions
ZTEZXMP M721ZXMPM721V5.30.020.001P01

References

Timeline

Published
Oct 27, 2025
Last modified
Oct 8, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-465835.3There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the CVE-2025-465845.5Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerabilitCVE-2025-465857.0Out-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation of this vulnerability may affect availabilCVE-2025-465865.5Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-465875.5Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidCVE-2025-465887.7Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and CVE-2025-465897.1Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and CVE-2025-46595.3The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full PaCVE-2025-465906.5Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypasCVE-2025-465915.5Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service cCVE-2025-465925.5Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availabCVE-2025-465935.5Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect a
CVE-2025-46582: High severity, CVSS 7.7 | Vulnix