CVE-2021-21734

Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command

published May 28, 2021

CVSS
—
EPSS
1%
Percentile
42.8
In the wild
Unconfirmed
What it is

Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. This affects: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22, ZXA10 F822 V1.4.3T6, ZXA10 F819 V1.2.1T5, ZXA10 F832 V1.1.1T7, ZXA10 F839 V1.1.0T8, ZXA10 F809 V3.2.1T1, ZXA10 F822P V1.1.1T7, ZXA10 F832 V2.00.00.01

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.8th percentile
Published
2021-05-28T11:45Z
EPSS history
Timeline
  • 28 MAY 11:45Z
    Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command
    cvelistv5