CVE-2021-21743

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-74

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-217447.5ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration paraCVE-2021-217454.3ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to CVE-2021-217466.1ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.CVE-2021-217476.1ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.CVE-2021-217489.8ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary cCVE-2021-217499.8ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary cCVE-2021-21752.7Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c anCVE-2021-217507.8ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege,CVE-2021-217518.1ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications wheCVE-2021-217710.0Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported version that is affecCVE-2021-217728.1A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially CVE-2021-217737.8An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafte
CVE-2021-21743: Medium severity, CVSS 4.3 | Vulnix