VULNERABILITY INTELLIGENCE

CVE-2021-21745

CVSS score4.3 MEDIUM

EPSS probability55.71%

CISA KEVNot currently listed

Published2021-10-20

Last modified2026-06-17

Description

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.