CVE-2021-21744

Published: Oct 20, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the device to be disabled.

Affected (5)

Products: Zte: Mf971r Firmware

Zte

1 product

Mf971r Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zte Mf971r Firmware	Version v1.0.0b05

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Zte Mf971r Firmware	Version 1v1.0.0b06

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Zte Mf971r Firmware	Version 2v1.0.0b03

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Zte Mf971r Firmware	Version s2v1.0.0b03

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zte Mf971r Firmware	Version sv1.0.0b05

Running on/with	Platform Versions
Zte Mf971r	All versions

References (2)

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1019764

Source: psirt@zte.com.cn

Vendor Advisory

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1019764

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.