Vulnerability Description
A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axon 11 5G ZTE/CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zte | Axon 11 5G Firmware | < 2021.5.1 |
| Zte | Axon 11 5G | - |
References
- https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015064Vendor Advisory
- https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015064Vendor Advisory
FAQ
What is CVE-2021-21732?
CVE-2021-21732 is a vulnerability with a CVSS score of 7.5 (HIGH). A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorizat...
How severe is CVE-2021-21732?
CVE-2021-21732 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-21732?
Check the references section above for vendor advisories and patch information. Affected products include: Zte Axon 11 5G Firmware, Zte Axon 11 5G.