CVE-2021-21729

6.5 mediumEPSS 0.4%

Medium (6.5) in zte. EPSS 0.4% chance of exploitation in the next 30 days.

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-330, CWE-352
Published: 2021-04-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zte:zxhn_h108n_firmware
zte:zxhn_h168n_firmware

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014904
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014904

Check your stack JSON