CVE-2021-21748

Published Oct 20, 2021

Last updated 3 years ago

CVSS critical 9.8

Overview

Description: ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.
Source: psirt@zte.com.cn
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-787

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zte:mf971r_firmware:v1.0.0b05:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "72A4F659-C656-47D6-B38E-5BA8E73DCD30"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zte:mf971r:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9A7F54F4-E324-4D1E-839E-677396BAFE49"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zte:mf971r_firmware:1v1.0.0b06:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "35FA4400-636F-48E7-AF1E-9416D9E9386F"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zte:mf971r:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9A7F54F4-E324-4D1E-839E-677396BAFE49"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zte:mf971r_firmware:2v1.0.0b03:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "252BBFAA-0053-441A-8F20-A737EF573355"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zte:mf971r:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9A7F54F4-E324-4D1E-839E-677396BAFE49"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zte:mf971r_firmware:s2v1.0.0b03:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B066F08-DDC4-4868-8FD2-620E46660B64"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zte:mf971r:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9A7F54F4-E324-4D1E-839E-677396BAFE49"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:zte:mf971r_firmware:sv1.0.0b05:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AAA1BD70-DC47-4B81-A906-3FD76E593F75"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:zte:mf971r:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9A7F54F4-E324-4D1E-839E-677396BAFE49"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References