Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-21737

Опубликовано: 24 июн. 2021
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83011303.0010, V83011303.0016

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:zte:zxv10_b860h_v5.0_firmware:v83011303.0010:*:*:*:*:*:*:*
cpe:2.3:o:zte:zxv10_b860h_v5.0_firmware:v83011303.0016:*:*:*:*:*:*:*
cpe:2.3:h:zte:zxv10_b860h_v5.0:-:*:*:*:*:*:*:*

EPSS

Процентиль: 41%
0.00195
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

github
больше 3 лет назад

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83011303.0010, V83011303.0016

EPSS

Процентиль: 41%
0.00195
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-276