CVE-2021-21731

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects:...

CVE-2021-21731

The CVE-2021-21731 issue is a CSRF vulnerability in the ZTE ZXCLOUD iRAI management page. The root cause is insufficient verification of request origins, allowing an attacker to submit malicious requests that can delete data on the affected device. Affected products/versions: ZXCLOUD iRAI prior t...

ZTE 多款产品跨站请求伪造漏洞

The ZTE H168N is a router from the Chinese company ZTE ZTE. A security vulnerability exists in several ZTE products, where an attacker can construct messages to perform unauthorized operations. The following products and versions are affected: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N...

ZTE ZXHN H168N 安全漏洞

The ZTE ZXHN H168N is a router from ZTE Corporation ZTE, China. A security vulnerability exists in the ZXHN H168N 3.5.0 TY.T6, which allows attackers to access the CLI via a strong attack...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

Design/Logic Flaw

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

CVE-2021-21728

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This...

CVE-2021-21728

CVE-2021-21728 affects the ZTE ZXA10 C300M (all versions up to V4.3P8). The issue is a configuration error: a port is open by default, allowing an attacker to flush a high volume of packets to that port and cause resource exhaustion, reducing system processing capability. The root cause is a reso...

Weak Password Vulnerability in ZTE Corporation's Xpon-ONUs

Xpon-ONU is a router from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation Xpon-ONU, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in ZTE ONU EB01 v2 Router Management Page

ZTE Corporation is a leading global provider of integrated communications solutions. A weak password vulnerability exists in the management page of the ZTE ONU EB01 v2 router, which can be exploited by attackers to obtain sensitive information...

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

Code injection

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

CVE-2021-21727

The CVE-2021-21727 issue affects ZTE ZXHN F623 devices (All versions up to V6.0.0P3T33). A remote attacker can cause a denial of service by sending carefully crafted IPv6 packets to the device, enabling traffic amplification. The vulnerability is described as a DoS via IPv6 traffic amplification;...

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

Weak Password Vulnerability in ZTE Corporation's E5501 Management Platform

The E5501 is a 300M external antenna wireless router device. A weak password vulnerability exists in the ZTE Corporation E5501 management platform, which can be exploited by attackers to obtain sensitive information...

ZTE ZXHN F623 安全漏洞

The ZTE ZXHN F623 is a wireless router from ZTE China. It is used to provide Internet access. A security vulnerability exists in the ZTE ZXHN F623, which can be exploited by an attacker to amplify traffic by sending a well-constructed IPv6 message to the affected device, ultimately resulting in a...

Unauthorized Access Vulnerability in ZXHN F427 of ZTE Corporation

ZTE Corporation is a leading global provider of integrated communications solutions. An unauthorized access vulnerability exists in ZXHN F427 of ZTE Corporation, which can be exploited by attackers to obtain sensitive information...

CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...