← Back

CVE-2021-21725

nvd nist
Published: Mar 5, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.7
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.1 / Impact: 3.6
Source: NVD

Description

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.

Affected (1)

Zte
1 product
Zxhn H196q Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zxhn H196q Firmware
Version 9.1.0c2
Running on/withPlatform Versions
Zte
Zxhn H196q
All versions

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

Source: psirt@zte.com.cn
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.