CVE-2021-21725

medium

Description

A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.

References

http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624

Details

Source: Mitre, NVD

Published: 2021-03-05

Updated: 2021-03-12

Risk Information

CVSS v2

Base Score: 2.7

Vector: CVSS2#AV:A/AC:L/Au:S/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 5.7

Vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium