CVE-2021-21731: CSRF
A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this CSRF vulnerability?
The vulnerability ID for this CSRF vulnerability is CVE-2021-21731.
What is the severity level of CVE-2021-21731?
The severity level of CVE-2021-21731 is high (8.1).
How does the CSRF vulnerability in CVE-2021-21731 occur?
The CSRF vulnerability in CVE-2021-21731 occurs because the management page of the ZTE product does not fully verify whether the request comes from a trusted user.
What are the affected software versions of CVE-2021-21731?
The affected software version for CVE-2021-21731 is Zte Zxcloud Irai Firmware up to and excluding version 6.03.04.
How can an attacker exploit CVE-2021-21731?
An attacker can exploit CVE-2021-21731 by submitting a malicious request to the affected device to delete the data.