EUVD-2021-8909

Malicious code in bioql PyPI...

EUVD-2021-8894

Malicious code in bioql PyPI...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21737

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0,...

CVE-2021-21737

CVE-2021-21737 affects ZTE ZXV10 B860H family STBs (V5.0, V83011303.0010, V83011303.0016). The issue is a permission/access control vulnerability due to insufficient protection of system applications, enabling an attacker to tamper with the system desktop and affect system customization. No explo...

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

Information disclosure

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

CVE-2021-21722

The CVE-2021-21722 entry concerns a ZTE ZXV10 B860A Smart Set-Top Box information disclosure vulnerability. According to the sources, the issue arises because the device does not fully verify logs, enabling attackers to obtain sensitive user information for follow-on activity. Affected firmware/v...