Skip to content
OpenAdvisories
Unscored CVE-2021-21731 EUVD-2021-8903GHSA-964h-jjmp-xf6h

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully …

Published Apr 13, 2021 · Updated Aug 3, 2024 · Assigned by zte

Description

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04

Affected products

VendorProductAffectedFixed
— ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04 —

References