Description
ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MF971R | BD_ZTE_MF971RV1.0.0B05, BD_PLKPLMF971R1V1.0.0B06, BD_MF971R2V1.0.0B03, BD_ZTE_MF971RS2V1.0.0B03, BD_ZTE_MF971RSV1.0.0B05 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- ZTE MF971R - Referer authentication bypass http/cves/2021/CVE-2021-21745.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.