PT-2021-14736 · Zte · Zxhn H196Q

Published 2021-03-05 · Updated 2021-03-12 · CVE-2021-21725

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZXHN H196Q version V9.1.0C2

Description The issue is an information leak vulnerability that allows an attacker with higher authority to access files in other directories by performing specific operations, resulting in information leak.

Recommendations For ZXHN H196Q version V9.1.0C2, update to a version that fixes this issue, as the current version allows unauthorized access to files.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-21725

Affected Products

Zxhn H196Q

References · 4

• https://osv.dev/vulnerability/CVE-2021-21725 · Vendor Advisory
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21725 · Security Note
• https://t.me/cibsecurity/24535 · Telegram Post