CVE-2025-46582

HIGH EPSS 22.8%

Published Oct 27, 20258mo ago · Modified Jun 17, 20261w ago

7.7 CVSS 3.1

High

Published Oct 27, 2025 8mo ago

Last Modified Jun 17, 2026 1w ago

Description

A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security.

CVSS Details

Base Score

7.7

Exploitability

3.1

Impact

4.0

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Changed

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

22.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-321

References 1

support.zte.com.cn https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2594779029512220847

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.