CVE-2021-21745

2021-10-2015:20:50

zte

www.cve.org

zte mf971r

referer authentication bypass

csrf verification

illegal authorization operations

AI Score

5.1

Confidence

High

EPSS

0.196

Percentile

96.4%

JSON

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.

CNA Affected

[
  {
    "product": "MF971R",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BD_ZTE_MF971RV1.0.0B05, BD_PLKPLMF971R1V1.0.0B06, BD_MF971R2V1.0.0B03, BD_ZTE_MF971RS2V1.0.0B03, BD_ZTE_MF971RSV1.0.0B05"
      }
    ]
  }
]