Vulnerability in Zte Zxhn_h168n
CVE-2021-21735
A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without…
EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Zte Zxhn_h168n
- Zte Zxhn_h168n_firmware
- N/a Zxhn H168n — versions All versions up to V3.5.0_EG1T4_TE
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@zte.com.cn (x_refsource_MISC, Vendor Advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2021-21735?
- CVE-2021-21735 is a medium-severity vulnerability in Zte Zxhn_h168n, classified under Improper Preservation of Permissions. CVSS score: 6.5/10. Published 2021-06-10.
- How severe is CVE-2021-21735?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2021-21735 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.