Vulnerability in Kz Broadband Technologies, Ltd. Am3000m
CVE-2021-47740
KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms.
EPSS: 0.004 (30.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Kz Broadband Technologies, Ltd. Am3000m — versions 2.0.0B21
- Kz Broadband Technologies, Ltd. Am3100e — versions 2.0.0B981
- Kz Broadband Technologies, Ltd. Am3100v — versions 2.0.0B946
- Kz Broadband Technologies, Ltd. Am3300v — versions 2.0.0B1060
- Kz Broadband Technologies, Ltd. Am3410v — versions 2.0.0B1085
- Kz Broadband Technologies, Ltd. Am3500mw — versions 2.0.0B1092
- Kz Broadband Technologies, Ltd. Am4100v — versions 2.0.0B2988
- Kz Broadband Technologies, Ltd. Am4200m — versions 2.0.0B2996
- Kz Broadband Technologies, Ltd. Am5000w — versions 2.0.0B3037
- Kz Broadband Technologies, Ltd. Am6000n — versions 2.0.0B3042
Weakness classification (CWE)
References
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (vdb-entry)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2021-47740?
- CVE-2021-47740 is a high-severity vulnerability in Kz Broadband Technologies, Ltd. Am3000m, classified under Insufficient Session Expiration. CVSS score: 7.5/10. Published 2025-12-31.
- How severe is CVE-2021-47740?
- High severity. CVSS v3 base score is 7.5 out of 10.