Elasticnet Rnia R18 Ngi
Monthly
Authenticated SQL injection in ZTE Elasticnet RNIA R18 NGI allows a logged-in attacker to read sensitive database information, with a CVSS 3.1 score of 6.5 reflecting high confidentiality impact but no integrity or availability impact. Exploitation requires valid credentials (PR:L), which aligns with the vendor's internal threat-level classification and limits exposure to users who can already authenticate to the application. There is no CISA KEV confirmation and no public exploit identified at time of analysis; the priority label is this_month.
Authenticated SQL injection in ZTE Elasticnet RNIA R18 NGI allows a logged-in attacker to read sensitive database information, with a CVSS 3.1 score of 6.5 reflecting high confidentiality impact but no integrity or availability impact. Exploitation requires valid credentials (PR:L), which aligns with the vendor's internal threat-level classification and limits exposure to users who can already authenticate to the application. There is no CISA KEV confirmation and no public exploit identified at time of analysis; the priority label is this_month.