Vulnerability Details CVE-2021-21741
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2021-21741
-
cpe:2.3:h:zte:zxv10_m910:*
-
cpe:2.3:o:zte:zxv10_m910_firmware:1.2.16.01u01.01
-
cpe:2.3:o:zte:zxv10_m910_firmware:1.2.19.01u01.01
-
cpe:2.3:o:zte:zxv10_m910_firmware:1.2.20.01u01.01
-
cpe:2.3:o:zte:zxv10_m910_firmware:1.2.21.01.04