// For flags

CVE-2021-21725

 

Severity Score

5.7
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.

Un producto ZTE presenta una vulnerabilidad de filtrado de información. Un atacante con mayor autoridad puede ir más allá de su autoridad para acceder a archivos en otros directorios al llevar a cabo operaciones específicas, resultando en un filtrado de información. Esto afecta a: ZXHN H196Q V9.1.0C2

*Credits: N/A
CVSS Scores
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Adjacent
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-01-04 CVE Reserved
  • 2021-03-05 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-863: Incorrect Authorization
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zte
Search vendor "Zte"
 Zxhn H196q Firmware
Search vendor "Zte" for product "Zxhn H196q Firmware"
 9.1.0c2
Search vendor "Zte" for product "Zxhn H196q Firmware" and version "9.1.0c2"
-
Affected
in Zte
Search vendor "Zte"
 Zxhn H196q
Search vendor "Zte" for product "Zxhn H196q"
--
Safe