CVEDB API

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.1%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2021-21746

Zte » Mf971r » Version: N/A

cpe:2.3:h:zte:mf971r:-
Zte » Mf971r Firmware » Version: 1v1.0.0b06

cpe:2.3:o:zte:mf971r_firmware:1v1.0.0b06
Zte » Mf971r Firmware » Version: 2v1.0.0b03

cpe:2.3:o:zte:mf971r_firmware:2v1.0.0b03
Zte » Mf971r Firmware » Version: s2v1.0.0b03

cpe:2.3:o:zte:mf971r_firmware:s2v1.0.0b03
Zte » Mf971r Firmware » Version: sv1.0.0b05

cpe:2.3:o:zte:mf971r_firmware:sv1.0.0b05
Zte » Mf971r Firmware » Version: v1.0.0b05

cpe:2.3:o:zte:mf971r_firmware:v1.0.0b05