CVE-2021-21729: CSRF
First published: Tue Apr 13 2021(Updated: )
Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1
Credit: psirt@zte.com.cn
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zte Zxhn H168n Firmware | =3.5.0_eg1t5_te | |
| ZTE ZXHN H168N | ||
| Zte Zxhn H108n Firmware | =2.5.5_btmt1 | |
| ZTE ZXHN H108N |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this CSRF vulnerability in ZTE products?
The vulnerability ID for this CSRF vulnerability in ZTE products is CVE-2021-21729.
What is the severity of CVE-2021-21729?
The severity of CVE-2021-21729 is medium with a CVSS score of 6.5.
Which ZTE products are affected by CVE-2021-21729?
ZXHN H168N V3.5.0_EG1T5_TE and ZXHN H108N V2.5.5_BTMT1 are affected by CVE-2021-21729.
How could attackers exploit CVE-2021-21729?
Attackers could perform illegal authorization operations by constructing messages due to the CSRF vulnerability in ZTE products.
Is there a fix available for CVE-2021-21729?
Please refer to the ZTE support website for information on fixes for CVE-2021-21729.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/zte
- canonical/zte zxhn h168n firmware
- version/zte zxhn h168n firmware/3.5.0_eg1t5_te
- canonical/zte zxhn h168n
- canonical/zte zxhn h108n firmware
- version/zte zxhn h108n firmware/2.5.5_btmt1
- canonical/zte zxhn h108n