Vulnerabilities

TI-2021-04815 CVE-2021-21748 · GHSA-m9f9-g5qh-gh99

Out-of-bounds write in MF971R

MEDIUM 46

ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01777 Published 2021-10-20 No fix listed CWE-787

TI-2021-04816 CVE-2021-21749 · GHSA-q2w2-7h8m-xxvx

MEDIUM 45

ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01617 Published 2021-10-20 No fix listed CWE-787

TI-2021-04812 CVE-2021-21745 · GHSA-38xm-h4pj-7w7h

MEDIUM 53

ZTE MF971R product has a Referer authentication bypass vulnerability.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.55709 Published 2021-10-20 No fix listed CWE-352

TI-2021-04810 CVE-2021-21743 · GHSA-jm9f-ff4v-792m

LOW 22

ZTE MF971R product has a CRLF injection vulnerability.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0085 Published 2021-10-20 No fix listed CWE-74

TI-2021-04811 CVE-2021-21744 · GHSA-658m-w6cm-wwr4

LOW 34

ZTE MF971R product has a configuration file control vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00825 Published 2021-10-20 No fix listed

TI-2021-04814 CVE-2021-21747 · GHSA-gvw7-9wmh-c622

LOW 28

ZTE MF971R product has reflective XSS vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-10-20 No fix listed CWE-79

TI-2021-04813 CVE-2021-21746 · GHSA-m95q-8r9m-5gjj

LOW 28

ZTE MF971R product has reflective XSS vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-10-20 No fix listed CWE-79