2 lines
4.8 KiB
JSON
2 lines
4.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"<ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S>","vendor":"n/a","versions":[{"status":"affected","version":"<all versions up to V1.01.10.B12>"}]}],"source":"psirt@zte.com.cn"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:zxr10_9904_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4944E354-3041-46F1-A74B-82CC750273D8","versionEndIncluding":"v1.01.10.b12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:zxr10_9904:-:*:*:*:*:*:*:*","matchCriteriaId":"D1747E7A-AB46-4D3C-BD82-659DAA58C43A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:zxr10_9908_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"722F3591-8D28-4D42-BF33-C67169F21BC3","versionEndIncluding":"v1.01.10.b12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:zxr10_9908:-:*:*:*:*:*:*:*","matchCriteriaId":"F83A1243-E923-4735-AC8D-875605530747","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:zxr10_9916_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2F35755D-7919-4CC5-B9CA-E88FD4483D4C","versionEndIncluding":"v1.01.10.b12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:zxr10_9916:-:*:*:*:*:*:*:*","matchCriteriaId":"E1DE8F4A-8A42-4C1C-82EA-85543F5E805D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:zxr10_9904-s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"85884147-B665-404A-8117-4519732F7C1D","versionEndIncluding":"v1.01.10.b12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:zxr10_9904-s:-:*:*:*:*:*:*:*","matchCriteriaId":"78D0B84F-0C58-41C3-8083-BD74E9D0118D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:zxr10_9908-s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0602358F-5958-4172-AB42-8C77853A5347","versionEndIncluding":"v1.01.10.b12","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:zxr10_9908-s:-:*:*:*:*:*:*:*","matchCriteriaId":"813FBCBD-4900-49C7-B0E2-C75DD3788694","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affects: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S; all versions up to V1.01.10.B12."},{"lang":"es","value":"Algunos productos ZTE presentan una vulnerabilidad de DoS. Debido al manejo inapropiado de la liberación de la memoria en algunos escenarios específicos, un atacante remoto puede desencadenar la vulnerabilidad al llevar a cabo una serie de operaciones, resultando en una pérdida de memoria, que eventualmente puede conllevar a una denegación de servicio del dispositivo. Esto afecta a: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S; todas las versiones hasta V1.01.10.B12"}],"id":"CVE-2021-21723","lastModified":"2026-06-17T03:36:02.517","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-01-26T18:16:18.803","references":[{"source":"psirt@zte.com.cn","tags":["Vendor Advisory"],"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424"}],"sourceIdentifier":"psirt@zte.com.cn","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-401"}],"source":"nvd@nist.gov","type":"Primary"}]}
|