medium4.3
CVE-2021-21745
ZTE MF971R product has a Referer authentication bypass vulnerability.
Impact
ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Mf971r Firmware | Versions v1.0.0b05, 1v1.0.0b06, 2v1.0.0b03, s2v1.0.0b03, sv1.0.0b05 |