CVE-2025-66314

HighCVSS 7.5/10Last modified Oct 18, 2026

Description

Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ElasticNet UME R32: ElasticNet_UME_R32_V16.23.20.04.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
ZTEElasticNet UME R32ElasticNet_UME_R32_V16.23.20.04

References

Timeline

Published
Nov 27, 2025
Last modified
Oct 18, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-663158.8There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settingCVE-2025-663195.5Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect serviceCVE-2025-66327.8A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious acCVE-2025-663204.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-663214.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-663224.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-663235.5Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect avaiCVE-2025-663245.5Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affeCVE-2025-663255.5Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service CVE-2025-663264.7Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663274.7Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2025-663284.7Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect
CVE-2025-66314: High severity, CVSS 7.5 | Vulnix