CVE-2021-21731

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the…

published April 13, 2021

CVSS
—
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.7th percentile
Published
2021-04-13T15:05Z
EPSS history
Timeline
  • 13 APR 15:05Z
    A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the…
    cvelistv5