Vulnerability · Published Dec 27, 2021 · Assigned by zte
CVE-2021-21751
High 8.1
In plain English
A high-severity security flaw in ZXIN10 CMS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)0.9%top 41.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configuring the large screen page, an attacker with high privileges could exploit this vulnerability to tamper with the URL and cause service exception.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ZXIN10 CMS | All versions up to ZXOMS-BIGDATA-IOPSWEBV3.01.01.04 |