CVE-2025-26708: ZTELink has a configuration defect vulnerability
There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configuration of the ZTELink. An attacker can obtain unauthorized access to the WiFi service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26708?
CVE-2025-26708 is considered a medium severity vulnerability due to its potential for unauthorized access to the WiFi service.
How do I fix CVE-2025-26708?
To fix CVE-2025-26708, ensure that the WiFi parameter configuration in ZTELink 5.4.9 is properly secured and not using default settings.
What systems are affected by CVE-2025-26708?
CVE-2025-26708 affects version 5.4.9 of the ZTE ZTELink application for iOS.
What can an attacker do if they exploit CVE-2025-26708?
An attacker who exploits CVE-2025-26708 can gain unauthorized access to WiFi services, potentially intercepting data transmitted over the network.
When was CVE-2025-26708 disclosed?
CVE-2025-26708 was disclosed recently, highlighting a critical flaw in the WiFi configuration of the ZTELink application.