📦

mf971r

Vendor: zte

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 2 Remote Access
Total CVEs 7 Total Indexed
Avg. EPSS 8.85% Exploit Prob.
Latest CVE CVE-2021-21749 Oct 20

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2021-21749
RCE

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.

EPSS: 1.62%
9.8 CVSS
CVE-2021-21748
RCE

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.

EPSS: 1.78%
4.3 CVSS
CVE-2021-21745

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.

EPSS: 55.71%
7.5 CVSS
CVE-2021-21744

ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the device to be disabled.

EPSS: 0.82%
4.3 CVSS
CVE-2021-21743

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.

EPSS: 0.85%
6.1 CVSS
CVE-2021-21747

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.

EPSS: 0.58%
6.1 CVSS
CVE-2021-21746

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.

EPSS: 0.58%