Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2021-47740

KZTech JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KZ Broadband Technologies, Ltd. JT3500V

  • 2.0.1B1064affected
  • 2.0.1B1047affected

KZ Broadband Technologies, Ltd. AM6200M

  • 2.0.0B3210affected

KZ Broadband Technologies, Ltd. AM6000N

  • 2.0.0B3042affected

KZ Broadband Technologies, Ltd. AM5000W

  • 2.0.0B3037affected

KZ Broadband Technologies, Ltd. AM4200M

  • 2.0.0B2996affected

KZ Broadband Technologies, Ltd. AM4100V

  • 2.0.0B2988affected

KZ Broadband Technologies, Ltd. AM3500MW

  • 2.0.0B1092affected

KZ Broadband Technologies, Ltd. AM3410V

  • 2.0.0B1085affected

KZ Broadband Technologies, Ltd. AM3300V

  • 2.0.0B1060affected

KZ Broadband Technologies, Ltd. AM3100E

  • 2.0.0B981affected

KZ Broadband Technologies, Ltd. AM3100V

  • 2.0.0B946affected

KZ Broadband Technologies, Ltd. AM3000M

  • 2.0.0B21affected

KZ Broadband Technologies, Ltd. KZ7621U

  • 2.0.0B14affected

KZ Broadband Technologies, Ltd. KZ3220M

  • 2.0.0B04affected

KZ Broadband Technologies, Ltd. KZ3120R

  • 2.0.0B01affected

References