HIGH🇬🇧 English

CVE-2021-21744

CVSS 7.5v3.1pub. 2021-10-20upd. 2024-11-21

ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the device to be disabled.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Zte Mf971r

    HW
    Zte
    wszystkie wersje

  • Zte Mf971r Firmware

    OS
    Zte
    1v1.0.0b062v1.0.0b03s2v1.0.0b03sv1.0.0b05v1.0.0b05
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2021-21748CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w ZTE MF971R — możliwość RCE

CVE-2021-21749CRITICAL9.8PL ✓ten sam produkt

ZTE MF971R — krytyczne podatności stack-based buffer overflow umożliwiające RCE

CVE-2021-21743MEDIUM4.3ten sam produkt

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify t...

CVE-2021-21745MEDIUM4.3ten sam produkt

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackerco...

CVE-2021-21746MEDIUM6.1ten sam produkt

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie ...