Skip to content
OpenAdvisories
Unscored CVE-2021-21743 EUVD-2021-8915GHSA-jm9f-ff4v-792m

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header infor…

Published Oct 20, 2021 · Updated Aug 3, 2024 · Assigned by zte

Description

ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.

Affected products

VendorProductAffectedFixed
— MF971R BD_ZTE_MF971RV1.0.0B05, BD_PLKPLMF971R1V1.0.0B06, BD_MF971R2V1.0.0B03, BD_ZTE_MF971RS2V1.0.0B03, BD_ZTE_MF971RSV1.0.0B05 —

References