CVEvulnerability

CVE-2021-21735

6.5 MEDIUM Published 2021-06-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-281

Description

A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up to V3.5.0_EG1T4_TE.

Affected configurations

• zte zxhn h168n firmware (<= 3.5.0 eg1t4 te)

Related

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References