Lucene search

[email protected]CVE-2021-21726

HistoryMar 12, 2021 - 7:15 p.m.

CVE-2021-21726

2021-03-1219:15:15

CWE-20

[email protected]

web.nvd.nist.gov

zte

input verification

vulnerability

diagnostic function

interface

zxone 9700

zxone 8700

zxone 19700

nvd

cve-2021-21726

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

2.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>

Affected configurations

NVD

Node

ztezxone_9700Match-

AND

ztezxone_9700_firmwareMatch1.40.021.021cp049

Node

ztezxone_8700Match-

AND

ztezxone_8700_firmwareMatch1.40.021.021cp049

Node

ztezxone_19700Match-

AND

ztezxone_19700_firmwareMatch1.0p02b219_\@ncpm-release_2.40r1-20200914.set

CPENameOperatorVersion
zte:zxone_9700_firmwarezte zxone 9700 firmwareeq1.40.021.021cp049

CPE	Name	Operator	Version
zte:zxone_9700_firmware	zte zxone 9700 firmware	eq	1.40.021.021cp049

CNA Affected

[
  {
    "product": "<ZXONE 9700 , ZXONE 8700, ZXONE 19700>",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "<V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014664

Social References

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

2.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

Related for CVE-2021-21726

nvd1 cvelist1 prion1