Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-21731

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a t

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zte

Description

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a ZXCLOUD iRAI

  • All versions up to KVM-ProductV6.03.04affected

References