CVE-2021-21724

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to V3.03.20R2B30P1.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

Vendor	Product	Versions
n/a	ZXR10 8900E	all versions up to V3.03.20R2B30P1

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014584Vendor Advisory
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014584Vendor Advisory

Timeline

Published: Feb 26, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-217255.7A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in othe CVE-2021-217262.3Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some pa CVE-2021-217277.5A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected d CVE-2021-217285.3A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing CVE-2021-217296.5Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authoriza CVE-2021-21734.1Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c.CVE-2021-217309.8A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute for CVE-2021-217318.1A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully v CVE-2021-217327.5A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications ca CVE-2021-217334.9The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the infor CVE-2021-217346.5Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. Thi CVE-2021-217356.5A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could e