CVE-2021-21745

ZTE MF971R product has a Referer authentication bypass vulnerability

published October 20, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
56%
Percentile
99.0
In the wild
Unconfirmed
What it is

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.55709 · 99.0th percentile
Published
2021-10-20T15:20Z
EPSS history
Timeline
  • 20 OCT 15:20Z
    ZTE MF971R product has a Referer authentication bypass vulnerability
    cvelistv5