Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-21731

Опубликовано: 13 апр. 2021
Источник: nvd
CVSS3: 8.1
CVSS2: 5.8
EPSS Низкий

Описание

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:zte:zxcloud_irai:*:*:*:*:*:*:*:*
Версия до 6.03.04 (исключая)
cpe:2.3:a:zte:zxcloud_irai:-:*:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00102
Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.1
github
больше 3 лет назад

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04

EPSS

Процентиль: 28%
0.00102
Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352