PT-2021-14739 · Unknown · Zxa10 C300M

Published 2021-04-09 · Updated 2021-04-20 · CVE-2021-21728

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions ZXA10 C300M versions up to V4.3P8

Description A configuration error exists due to a certain port being open by default. This allows an attacker to consume system processing resources by sending a large number of packets to the port. Successful exploitation could reduce system processing capabilities.

Recommendations For versions up to V4.3P8, consider restricting access to the open port as a temporary workaround until a patch is available. Additionally, limiting the number of packets that can be sent to the port may help minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-21728

Affected Products

Zxa10 C300M

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-21728 · Security Note
• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014784 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21728 · Vendor Advisory