CVE-2021-21740

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information leak.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published: Aug 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-217419.8There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker coul CVE-2021-217425.5There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers c CVE-2021-217434.3ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header inform CVE-2021-217447.5ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration para CVE-2021-217454.3ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to CVE-2021-217466.1ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.CVE-2021-217476.1ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.CVE-2021-217489.8ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary c CVE-2021-217499.8ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary c CVE-2021-21752.7Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c an CVE-2021-217507.8ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege,CVE-2021-217518.1ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications whe