Vulnerability · Published Apr 13, 2021 · Assigned by zte
CVE-2021-21729
Medium 6.5
In plain English
A medium-severity security flaw in ZXHN H168N,ZXHN H108N. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.4%top 66.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ZXHN H168N,ZXHN H108N | V3.5.0_EG1T5_TEV2.5.5_BTMT1 |