NetSight
medium6.5

CVE-2021-21729

Some ZTE products have CSRF vulnerability.

Impact

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1

Affected products

VendorProductAffected versions
ZteZxhn H168n Firmware
Version 3.5.0_eg1t5_te
ZteZxhn H108n Firmware
Version 2.5.5_btmt1

Weakness classification

References