What is CVE-2021-21743?

CVE-2021-21743 is a CRLF injection vulnerability in the ZTE MF971R product.

How can an attacker exploit CVE-2021-21743?

An attacker can exploit CVE-2021-21743 by modifying the HTTP response header information through a specially crafted HTTP request.

What is the severity of CVE-2021-21743?

The severity of CVE-2021-21743 is medium with a CVSS score of 4.3.

Which software versions of ZTE MF971R are affected by CVE-2021-21743?

The ZTE MF971R firmware versions v1.0.0b05, 1v1.0.0b06, 2v1.0.0b03, s2v1.0.0b03, sv1.0.0b05 are affected by CVE-2021-21743.

How can CVE-2021-21743 be fixed?

There is no information available on a specific fix for CVE-2021-21743 at the moment. It is recommended to follow the security advisory provided by ZTE.

Vulnerability/
CVE-2021-21743

medium

4.3

CWE

74 93

20/10/2021

3/8/2024

CVE-2021-21743: CRLF Injection

First published: Wed Oct 20 2021(Updated: )

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.

Credit: psirt@zte.com.cn

Affected Software	Affected Version	How to fix
Zte Mf971r Firmware	=v1.0.0b05
ZTE MF971R
Zte Mf971r Firmware	=1v1.0.0b06
Zte Mf971r Firmware	=2v1.0.0b03
Zte Mf971r Firmware	=s2v1.0.0b03
Zte Mf971r Firmware	=sv1.0.0b05

Never miss a vulnerability like this again

Reference Links

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1019764

Frequently Asked Questions

What is CVE-2021-21743?
CVE-2021-21743 is a CRLF injection vulnerability in the ZTE MF971R product.
How can an attacker exploit CVE-2021-21743?
An attacker can exploit CVE-2021-21743 by modifying the HTTP response header information through a specially crafted HTTP request.
What is the severity of CVE-2021-21743?
The severity of CVE-2021-21743 is medium with a CVSS score of 4.3.
Which software versions of ZTE MF971R are affected by CVE-2021-21743?
The ZTE MF971R firmware versions v1.0.0b05, 1v1.0.0b06, 2v1.0.0b03, s2v1.0.0b03, sv1.0.0b05 are affected by CVE-2021-21743.
How can CVE-2021-21743 be fixed?
There is no information available on a specific fix for CVE-2021-21743 at the moment. It is recommended to follow the security advisory provided by ZTE.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/weakness
agent/severity
agent/last-modified-date
agent/author
agent/description
agent/first-publish-date
agent/tags
agent/event
agent/source
vendor/zte
canonical/zte mf971r firmware
version/zte mf971r firmware/v1.0.0b05
canonical/zte mf971r
version/zte mf971r firmware/1v1.0.0b06
version/zte mf971r firmware/2v1.0.0b03
version/zte mf971r firmware/s2v1.0.0b03
version/zte mf971r firmware/sv1.0.0b05

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.