Skip to content
OpenAdvisories
Unscored CVE-2021-21729 EUVD-2021-8901GHSA-fm5v-c286-fp3w

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authoriz…

Published Apr 13, 2021 · Updated Aug 3, 2024 · Assigned by zte

Description

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1

Affected products

VendorProductAffectedFixed
— ZXHN H168N,ZXHN H108N V3.5.0_EG1T5_TE, V2.5.5_BTMT1 —

References