Zte Mf258k Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zte Mf258k Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-22065 — CVSS 6.8 (medium): There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter…
• CVE-2025-66315 — CVSS 4.3 (medium): There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission…