CVE-2025-66314: High severity ZTE ElasticNet UME vulnerability
Published Nov 27, 2025
·Updated
Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ElasticNet UME R32: ElasticNetUMER32V16.23.20.04.
Affected Software
1 affected component
ZTE ElasticNet UME
Remediation
Information
ElasticNet_UME_R32_V16.25.40.10
Event History
Nov 27, 2025
CVE Published
via MITRE·02:08 AM
Data Sourced
via MITRE·02:08 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-66314?
CVE-2025-66314 is rated as a critical vulnerability due to improper privilege management allowing unauthorized access.
2
How do I fix CVE-2025-66314?
To fix CVE-2025-66314, apply the latest security patch provided by ZTE for the ElasticNet UME R32 software.
3
What impacts does CVE-2025-66314 have on ZTE ElasticNet UME?
CVE-2025-66314 can lead to unauthorized access to functionalities not properly constrained by Access Control Lists (ACLs).
4
Who is affected by CVE-2025-66314?
CVE-2025-66314 affects users of ZTE ElasticNet UME R32 on Linux.
5
When was CVE-2025-66314 published?
CVE-2025-66314 was published recently, highlighting the urgent need for awareness and patching.