Zte Mf971r_firmware
7 CVEs affecting Zte Mf971r_firmware. Latest disclosed: 2021-10-20. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21749 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-21748 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-21744 | High | 7.5 | 2021-10-20 | ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the devic… |
CVE-2021-21747 | Medium | 6.1 | 2021-10-20 | ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information. |
CVE-2021-21746 | Medium | 6.1 | 2021-10-20 | ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information. |
CVE-2021-21745 | Medium | 4.3 | 2021-10-20 | ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal aut… |
CVE-2021-21743 | Medium | 4.3 | 2021-10-20 | ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a spe… |