PT-2021-14762 · Zte · Zte Bigvideo

Published 2021-12-27 · Updated 2023-08-08 · CVE-2021-21751

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZTE BigVideo analysis product (affected versions not specified)

Description The ZTE BigVideo analysis product has an input verification issue due to inconsistent front and back verifications when configuring the large screen page. An attacker with high privileges could exploit this to tamper with the URL, causing a service exception.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-21751

Affected Products

Zte Bigvideo

References · 4

• https://osv.dev/vulnerability/CVE-2021-21751 · Vendor Advisory
• https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1021884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21751 · Security Note
• https://t.me/cibsecurity/34683 · Telegram Post