Vulnerability in ZTE Mc889a Pro

CVE-2025-46583

There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the Short Message Service interface, allowing an attacker to exploit it to carry out a DoS attack.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

EPSS exploit prediction

EPSS: 0.004 (35.1th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 35th percentile — 35.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2025-46583: held from 0.004 to 0.004.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: +0.000

Affected products

  • ZTE Mc889a Pro — versions BD_STDPLMC889A PROV1.0.1B06, BD_STDPLMC889A PROV1.0.1B08

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-46583?
CVE-2025-46583 is a medium-severity vulnerability in ZTE Mc889a Pro, classified under Improper Encoding or Escaping of Output. CVSS score: 5.3/10. Published 2025-10-27.
How severe is CVE-2025-46583?
Medium severity. CVSS v3 base score is 5.3 out of 10.