2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"<Axon 11 5G>","vendor":"n/a","versions":[{"status":"affected","version":"<ZTE/CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys>"}]}],"source":"psirt@zte.com.cn"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:axon_11_5g_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8C956D21-AF7F-447D-B3C2-7C7A367B5BD5","versionEndExcluding":"2021.5.1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:axon_11_5g:-:*:*:*:*:*:*:*","matchCriteriaId":"0AB053B1-08C9-41C1-BD28-06A43B722C86","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axon 11 5G ZTE/CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys."},{"lang":"es","value":"Un teléfono móvil de ZTE está afectado por una vulnerabilidad de control de acceso inapropiado. Debido a una configuración de permisos inapropiada, unas aplicaciones de terceros pueden leer algunos archivos en el sistema de archivos proc sin autorización. Los atacantes podrían explotar esta vulnerabilidad para conseguir información confidencial. Esto afecta a Axon 11 5G ZTE/CN_P725A12/P725A12: 10/QKQ1.200816.002/20201116.175317: usuario/teclas de liberación"}],"id":"CVE-2021-21732","lastModified":"2026-06-17T03:36:03.443","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-05-19T11:15:07.757","references":[{"source":"psirt@zte.com.cn","tags":["Vendor Advisory"],"url":"https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015064"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015064"}],"sourceIdentifier":"psirt@zte.com.cn","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}
|