CVE-2021-21743

2021-10-2015:19:32

zte

www.cve.org

zte mf971r

crlf injection

http request

AI Score

4.9

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.

CNA Affected

[
  {
    "product": "MF971R",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BD_ZTE_MF971RV1.0.0B05, BD_PLKPLMF971R1V1.0.0B06, BD_MF971R2V1.0.0B03, BD_ZTE_MF971RS2V1.0.0B03, BD_ZTE_MF971RSV1.0.0B05"
      }
    ]
  }
]