CVE-2021-21722

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-T_V0032.1.1.04_jiangsuTelecom.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: Jan 14, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-217237.5Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can CVE-2021-217244.4A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attack CVE-2021-217255.7A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in othe CVE-2021-217262.3Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some pa CVE-2021-217277.5A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected d CVE-2021-217285.3A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing CVE-2021-217296.5Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authoriza CVE-2021-21734.1Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c.CVE-2021-217309.8A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute for CVE-2021-217318.1A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully v CVE-2021-217327.5A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications ca CVE-2021-217334.9The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the infor