1. Home
  2. CVE Database
  3. CVE-2021-21735
MEDIUM · 6.5

CVE-2021-21735

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user info...

Vulnerability Description

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up to V3.5.0_EG1T4_TE.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ZteZxhn H168N Firmware<= 3.5.0_eg1t4_te
ZteZxhn H168N-

Related Weaknesses (CWE)

CWE-281

References

FAQ

What is CVE-2021-21735?

CVE-2021-21735 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user info...

How severe is CVE-2021-21735?

CVE-2021-21735 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-21735?

Check the references section above for vendor advisories and patch information. Affected products include: Zte Zxhn H168N Firmware, Zte Zxhn H168N.