CVE-2021-21728

2021-04-0917:23:32

zte

www.cve.org

zte

configuration error

vulnerability

zxa10 c300m

system processing capabilities

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

39.5%

JSON

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This affects: ZXA10 C300M all versions up to V4.3P8.

CNA Affected

[
  {
    "product": "ZXA10 C300M",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "all versions up to V4.3P8"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014784