CVE-2021-21751
High
Published: 27 December 2021
Published
27 December 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS Score
0.0037
59.4th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-21751 is a high-severity an unspecified weakness vulnerability in Zte Zxin10 Cms. Its CVSS base score is 8.1 (High).
Operationally, ranked in the top 40.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-8923
Vulnerability details
ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configuring the large screen page, an attacker with high privileges could exploit this vulnerability to tamper with the URL and…
more
cause service exception.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
zte
zxin10 cms
≤ 3.01.01.04
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.