Vulnerability · Published Apr 13, 2021 · Assigned by zte
CVE-2021-21731
High 8.1
In plain English
A high-severity security flaw in ZXCLOUD iRAI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)0.4%top 65.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ZXCLOUD iRAI | All versions up to KVM-ProductV6.03.04 |