by Kastro
Paper/Archive/CVE-2021-21748

CVE-2021-21748

zte — ZTE MF971R product has two stack-based buffer overflow vulnerabilities.

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 78.2.782 × 2015.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.

Affected

ProductAffectedFixed inSource
MF971RBD_ZTE_MF971RV1.0.0B05, BD_PLKPLMF971R1V1.0.0B06, BD_MF971R2V1.0.0B03, BD_ZTE_MF971RS2V1.0.0B03, BD_ZTE_MF971RSV1.0.0B05–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1019764