Read the docs

ZTE

Records225All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical32CVSS 9.0–10.0
CVSS high86CVSS 7.0–8.9

Exploited now

ZTE records in CISA KEV

No ZTE vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zxcloud Irai 13 records MEDIUM Zxv10 W300 Firmware 8 records MEDIUM Mf971r Firmware 7 records MEDIUM Zxcloud Goldendb 7 records LOW Zxhn F670 Firmware 7 records MEDIUM Mf286r Firmware 6 records MEDIUM Zxhn H108n R1a Firmware 6 records MEDIUM Goldendb 5 records LOW

Records

7 records in Mf971r Firmware · all components

TI-2021-04812 CVE-2021-21745 · GHSA-38xm-h4pj-7w7h

Cross-site request forgery in MF971R

Priority MEDIUM 53

ZTE MF971R product has a Referer authentication bypass vulnerability.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.55709 Published 2021-10-20 No fix listed CWE-352
TI-2021-04815 CVE-2021-21748 · GHSA-m9f9-g5qh-gh99

Out-of-bounds write in MF971R

Priority MEDIUM 46

ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01777 Published 2021-10-20 No fix listed CWE-787
TI-2021-04816 CVE-2021-21749 · GHSA-q2w2-7h8m-xxvx

Out-of-bounds write in MF971R

Priority MEDIUM 45

ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01617 Published 2021-10-20 No fix listed CWE-787
TI-2021-04814 CVE-2021-21747 · GHSA-gvw7-9wmh-c622

Cross-site scripting in MF971R

Priority LOW 28

ZTE MF971R product has reflective XSS vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-10-20 No fix listed CWE-79
TI-2021-04813 CVE-2021-21746 · GHSA-m95q-8r9m-5gjj

Cross-site scripting in MF971R

Priority LOW 28

ZTE MF971R product has reflective XSS vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-10-20 No fix listed CWE-79
TI-2021-04810 CVE-2021-21743 · GHSA-jm9f-ff4v-792m

Injection in MF971R

Priority LOW 22

ZTE MF971R product has a CRLF injection vulnerability.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0085 Published 2021-10-20 No fix listed CWE-74
Open these records in search →