CVE-2021-21734
Quick assessment
Affected
n/a ZTE PON MDU devices
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ZTE PON MDU是中国中兴（ZTE）公司的主要应用于网络主干交换机之间，以及网络汇聚层交换机接入到网络主干交换机（核心交换机）的连接。 ZTE PON MDU中存在加密问题漏洞，该漏洞源于中兴通讯部分PON MDU设备以明文方式存储敏感信息，有登录权限的用户可以通过输入命令获取敏感信息。以下产品及型号受到影响: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22、ZXA10 F822 V1.4.3T6、ZXA10 F819 V1.2.1T5、ZXA10 F832 V1
Possible ATT&CK Techniques 1 AI
T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-21734
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. This affects: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22, ZXA10 F822 V1.4.3T6, ZXA10 F819 V1.2.1T5, ZXA10 F832 V1.1.1T7, ZXA10 F839 V1.1.0T8, ZXA10 F809 V3.2.1T1, ZXA10 F822P V1.1.1T7, ZXA10 F832 V2.00.00.01
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
ZTE PON MDU 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ZTE PON MDU是中国中兴（ZTE）公司的主要应用于网络主干交换机之间，以及网络汇聚层交换机接入到网络主干交换机（核心交换机）的连接。 ZTE PON MDU中存在加密问题漏洞，该漏洞源于中兴通讯部分PON MDU设备以明文方式存储敏感信息，有登录权限的用户可以通过输入命令获取敏感信息。以下产品及型号受到影响: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22、ZXA10 F822 V1.4.3T6、ZXA10 F819 V1.2.1T5、ZXA10 F832 V1
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | ZTE PON MDU devices | ZXA10 F821 V1.7.0P3T22,ZXA10 F822 V1.4.3T6,ZXA10 F819 V1.2.1T5,ZXA10 F832 V1.1.1T7,ZXA10 F839 V1.1.0T8,ZXA10 F809 V3.2.1T1,ZXA10 F822P V1.1.1T7,ZXA10 F832 V2.00.00.01 | - |
|
II. Public POCs for CVE-2021-21734
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-21734
请登录查看更多情报信息。
Other References for CVE-2021-21734 (1)
Same Patch Batch · n/a · 2021-05-28 · 43 CVEs total
| CVE-2021-33620 | 6.5 MEDIUM | Squid 输入验证错误漏洞 |
| CVE-2021-20195 | Red Hat Keycloak 输入验证错误漏洞 | |
| CVE-2020-35506 | QEMU 资源管理错误漏洞 | |
| CVE-2020-35504 | QEMU 代码问题漏洞 | |
| CVE-2010-3843 | Ettercap 缓冲区错误漏洞 | |
| CVE-2020-27847 | Dex Idp Dex 安全漏洞 | |
| CVE-2020-25710 | OpenLDAP 安全漏洞 | |
| CVE-2021-3514 | 389-ds-base 代码问题漏洞 | |
| CVE-2021-33587 | css-what 安全漏洞 | |
| CVE-2021-33623 | trim-newlines 资源管理错误漏洞 | |
| CVE-2020-25715 | pki-core 跨站脚本漏洞 | |
| CVE-2020-35505 | QEMU 代码问题漏洞 | |
| CVE-2021-20201 | spice 安全漏洞 | |
| CVE-2021-20236 | ZeroMQ 缓冲区错误漏洞 | |
| CVE-2021-20237 | ZeroMQ 资源管理错误漏洞 | |
| CVE-2021-20239 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2021-20240 | gdk-pixbuf 数字错误漏洞 | |
| CVE-2021-20278 | Kiali 授权问题漏洞 | |
| CVE-2021-20292 | Nouveau 资源管理错误漏洞 | |
| CVE-2021-27032 | Autodesk Licensing Services 访问控制错误漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-21734
No comments yet