CVE-2021-21735

2021-06-1011:18:23

zte

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up to V3.5.0_EG1T4_TE.

CNA Affected

[
  {
    "product": "ZXHN H168N",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions up to V3.5.0_EG1T4_TE"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015924