VULNERABILITY INTELLIGENCE
CVE-2021-21725
CVSS score5.7 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2021-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.
Weakness classification
- nvd@nist.gov: CWE-863
Primary references
- psirt@zte.com.cn — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory