SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-21733

The management system of ZXCDN is impacted by the information leak vulnerability.

MEDIUM 4.9EPSS 0.79%

Does this matter?

Lower severity and a low EPSS score (0.79%). Track it; it rarely justifies an emergency change on its own.

Description

The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some sensitive information. This affects ZXCDN V7.01 all versions up to IAMV7.01.01.02.

CVSS 3.1
4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.79% probability · 54th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
zte/zxcdn
Source
psirt@zte.com.cn

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.