Strix
26.1K

CVE-2021-21725

MEDIUMCVSS 5.7/10EPSS 0.49%

Last modified

CVE-2021-21725 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. EPSS estimates a 0.49% chance of exploitation in the next 30 days.

Description

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.

Metrics

CVSS 3.1
5.7/10

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.49%

38.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ZteZxhn H196q Firmware9.1.0c2

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2021-21725?
A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.
How severe is CVE-2021-21725?
CVE-2021-21725 has a CVSS score of 5.7/10 (MEDIUM severity). The EPSS model estimates a 0.49% probability of exploitation in the next 30 days.
How do I fix CVE-2021-21725?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-21725?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST