← Back

CVE-2021-21726

nvd nist
Published: Mar 12, 2021Modified: Jun 17, 2026

JSON object

Loading...
2.3
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Exploitability: 0.8 / Impact: 1.4
Source: NVD

Description

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>

Affected (3)

Zte
3 products
Zxone 9700 Firmware
Zxone 8700 Firmware
Zxone 19700 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zxone 9700 Firmware
Version 1.40.021.021cp049
Running on/withPlatform Versions
Zte
Zxone 9700
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zxone 8700 Firmware
Version 1.40.021.021cp049
Running on/withPlatform Versions
Zte
Zxone 8700
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zxone 19700 Firmware
Version 1.0p02b219_@ncpm-release_2.40r1-20200914.set
Running on/withPlatform Versions
Zte
Zxone 19700
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@zte.com.cn
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.