CVE-2025-66315

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Jan 9, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-663195.5Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect serviceCVE-2025-66327.8A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious acCVE-2025-663204.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-663214.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-663224.7Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect aCVE-2025-663235.5Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect avaiCVE-2025-663245.5Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affeCVE-2025-663255.5Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service CVE-2025-663264.7Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-663274.7Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2025-663284.7Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affectCVE-2025-663295.5Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availabil
CVE-2025-66315: High severity, CVSS 8.8 | Vulnix