Vulnerabilities > ZTE

DATE CVE VULNERABILITY TITLE RISK
2021-12-27 CVE-2021-21750 Improper Privilege Management vulnerability in ZTE Zxin10 CMS
ZTE BigVideo Analysis product has a privilege escalation vulnerability.
local
low complexity
zte CWE-269
7.8
2021-12-27 CVE-2021-21751 Unspecified vulnerability in ZTE Zxin10 CMS
ZTE BigVideo analysis product has an input verification vulnerability.
network
low complexity
zte
8.1
2021-10-20 CVE-2021-21743 Injection vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has a CRLF injection vulnerability.
network
low complexity
zte CWE-74
4.3
2021-10-20 CVE-2021-21744 Unspecified vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has a configuration file control vulnerability.
network
low complexity
zte
7.5
2021-10-20 CVE-2021-21745 Cross-Site Request Forgery (CSRF) vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has a Referer authentication bypass vulnerability.
network
low complexity
zte CWE-352
4.3
2021-10-20 CVE-2021-21748 Out-of-bounds Write vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has two stack-based buffer overflow vulnerabilities.
network
low complexity
zte CWE-787
critical
9.8
2021-10-20 CVE-2021-21749 Out-of-bounds Write vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has two stack-based buffer overflow vulnerabilities.
network
low complexity
zte CWE-787
critical
9.8
2021-10-20 CVE-2021-21746 Cross-site Scripting vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has reflective XSS vulnerability.
network
low complexity
zte CWE-79
6.1
2021-10-20 CVE-2021-21747 Cross-site Scripting vulnerability in ZTE Mf971R Firmware
ZTE MF971R product has reflective XSS vulnerability.
network
low complexity
zte CWE-79
6.1
2021-09-25 CVE-2021-21742 Unspecified vulnerability in ZTE Axon 30 PRO Message Service 5.3.1.2103091059
There is an information leak vulnerability in the message service app of a ZTE mobile phone.
local
low complexity
zte
5.5