CVE-2021-21729

Some ZTE products have CSRF vulnerability

published April 13, 2021

CVSS
—
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.6th percentile
Published
2021-04-13T15:13Z
EPSS history
Timeline
  • 13 APR 15:13Z
    Some ZTE products have CSRF vulnerability
    cvelistv5