KZTech JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vulnerability
Priority HIGH 70CWE-613Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-613.
Summary
KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00424 36th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| KZ Broadband Technologies, Ltd. | JT3500V | 2.0.1B1064; 2.0.1B1047 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM6200M | 2.0.0B3210 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM6000N | 2.0.0B3042 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM5000W | 2.0.0B3037 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM4200M | 2.0.0B2996 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM4100V | 2.0.0B2988 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM3500MW | 2.0.0B1092 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM3410V | 2.0.0B1085 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM3300V | 2.0.0B1060 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM3100E | 2.0.0B981 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM3100V | 2.0.0B946 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | AM3000M | 2.0.0B21 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | KZ7621U | 2.0.0B14 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | KZ3220M | 2.0.0B04 | — | No fix listed | CNA |
| KZ Broadband Technologies, Ltd. | KZ3120R | 2.0.0B01 | — | No fix listed | CNA |
- JT3500V VendorKZ Broadband Technologies, Ltd. Affected 2.0.1B1064; 2.0.1B1047 Fixed in — No fix listed CNA
- AM6200M VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B3210 Fixed in — No fix listed CNA
- AM6000N VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B3042 Fixed in — No fix listed CNA
- AM5000W VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B3037 Fixed in — No fix listed CNA
- AM4200M VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B2996 Fixed in — No fix listed CNA
- AM4100V VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B2988 Fixed in — No fix listed CNA
- AM3500MW VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B1092 Fixed in — No fix listed CNA
- AM3410V VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B1085 Fixed in — No fix listed CNA
- AM3300V VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B1060 Fixed in — No fix listed CNA
- AM3100E VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B981 Fixed in — No fix listed CNA
- AM3100V VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B946 Fixed in — No fix listed CNA
- AM3000M VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B21 Fixed in — No fix listed CNA
- KZ7621U VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B14 Fixed in — No fix listed CNA
- KZ3220M VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B04 Fixed in — No fix listed CNA
- KZ3120R VendorKZ Broadband Technologies, Ltd. Affected 2.0.0B01 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-47740
- 2026-10-03 Alias added: GHSA-x9rg-7xj6-v2x6
References
Sources
- CVE-2021-47740 · CVE Program
- CVE-2021-47740 · NVD
- FIRST EPSS
- GHSA-x9rg-7xj6-v2x6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences