VULNERABILITY INTELLIGENCE
CVE-2021-21740
CVSS score2.4 LOW
EPSS probability0.44%
CISA KEVNot currently listed
Published2021-08-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information leak.
Weakness classification
- nvd@nist.gov: CWE-59
Primary references
- psirt@zte.com.cn — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory