2.3
CVE-2021-21726
- EPSS 0.05%
- Veröffentlicht 12.03.2021 19:15:15
- Zuletzt bearbeitet 21.11.2024 05:48:53
- Quelle psirt@zte.com.cn
- Teams Watchlist Login
- Unerledigt Login
Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zte ≫ Zxone 9700 Firmware Version1.40.021.021cp049
Zte ≫ Zxone 8700 Firmware Version1.40.021.021cp049
Zte ≫ Zxone 19700 Firmware Version1.0p02b219_@ncpm-release_2.40r1-20200914.set
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.128 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.3 | 0.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.