What is CVE-2025-46583?

CVE-2025-46583 is a medium-severity vulnerability in Zte Mc889a Pro, classified under Improper Encoding or Escaping of Output. CVSS score: 5.3/10. Published 2025-10-27.

How severe is CVE-2025-46583?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Zte Mc889a Pro

CVE-2025-46583

There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the Short Message Service interface, allowing an attacker to exploit it to carry out a DoS attack.

EPSS: 0.004 (33.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Zte Mc889a Pro — versions BD_STDPLMC889A PROV1.0.1B06, BD_STDPLMC889A PROV1.0.1B08

Weakness classification (CWE)

CWE-116 — Improper Encoding or Escaping of Output

References

psirt@zte.com.cn

Frequently asked questions

What is CVE-2025-46583?: CVE-2025-46583 is a medium-severity vulnerability in Zte Mc889a Pro, classified under Improper Encoding or Escaping of Output. CVSS score: 5.3/10. Published 2025-10-27.
How severe is CVE-2025-46583?: Medium severity. CVSS v3 base score is 5.3 out of 10.