Vulnerability · Published Aug 9, 2021 · Assigned by zte
CVE-2021-21740
Low 2.4
In plain English
A low-severity security flaw in ZXHN H2640. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS NVD)2.4Low
Exploit odds (30 days)0.4%top 61.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information leak.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ZXHN H2640 | V10.0.0C6_TY |