There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability to escalate local privileges.
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034404