Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>

Published

2021-03-12T19:15:15.007

Last Modified

2024-11-21T05:48:53.330

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 2.3 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zte zxone_9700_firmware 1.40.021.021cp049 Yes
Hardware zte zxone_9700 - No
Operating System zte zxone_8700_firmware 1.40.021.021cp049 Yes
Hardware zte zxone_8700 - No
Operating System zte zxone_19700_firmware 1.0p02b219_\@ncpm-release_2.40r1-20200914.set Yes
Hardware zte zxone_19700 - No
References