Vulnerability · Published Mar 12, 2021 · Assigned by zte
CVE-2021-21726
Low 2.3
In plain English
A low-severity security flaw in <ZXONE 9700 , ZXONE 8700, ZXONE 19700>. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS NVD)2.3Low
Exploit odds (30 days)0.4%top 67.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | <ZXONE 9700 , ZXONE 8700, ZXONE 19700> | <V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set> |