Vulnerability Details CVE-2021-21743
ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.6%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.3
References
Products affected by CVE-2021-21743
-
cpe:2.3:h:zte:mf971r:-
-
cpe:2.3:o:zte:mf971r_firmware:1v1.0.0b06
-
cpe:2.3:o:zte:mf971r_firmware:2v1.0.0b03
-
cpe:2.3:o:zte:mf971r_firmware:s2v1.0.0b03
-
cpe:2.3:o:zte:mf971r_firmware:sv1.0.0b05
-
cpe:2.3:o:zte:mf971r_firmware:v1.0.0b05