Skip to main content

Mf971R Firmware

7 CVEs product

Monthly

CVE-2021-21749 CRITICAL Act Now

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Zte Memory Corruption RCE Mf971R Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2021-21748 CRITICAL Act Now

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Zte Memory Corruption RCE Mf971R Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-21745 MEDIUM POC THREAT This Month

ZTE MF971R product has a Referer authentication bypass vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Zte Authentication Bypass Mf971R Firmware
NVD
CVSS 3.1
4.3
EPSS
55.7%
CVE-2021-21744 HIGH This Week

ZTE MF971R product has a configuration file control vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte Information Disclosure Mf971R Firmware
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2021-21743 MEDIUM This Month

ZTE MF971R product has a CRLF injection vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte Code Injection Mf971R Firmware
NVD
CVSS 3.1
4.3
EPSS
0.8%
CVE-2021-21747 MEDIUM This Month

ZTE MF971R product has reflective XSS vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte XSS Mf971R Firmware
NVD
CVSS 3.1
6.1
EPSS
0.6%
CVE-2021-21746 MEDIUM This Month

ZTE MF971R product has reflective XSS vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte XSS Mf971R Firmware
NVD
CVSS 3.1
6.1
EPSS
0.6%
EPSS 2% CVSS 9.8
CRITICAL Act Now

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Zte Memory Corruption +2
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Zte Memory Corruption +2
NVD
EPSS 56% CVSS 4.3
MEDIUM POC THREAT This Month

ZTE MF971R product has a Referer authentication bypass vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Zte Authentication Bypass +1
NVD
EPSS 1% CVSS 7.5
HIGH This Week

ZTE MF971R product has a configuration file control vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte Information Disclosure Mf971R Firmware
NVD
EPSS 1% CVSS 4.3
MEDIUM This Month

ZTE MF971R product has a CRLF injection vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte Code Injection Mf971R Firmware
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

ZTE MF971R product has reflective XSS vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte XSS Mf971R Firmware
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

ZTE MF971R product has reflective XSS vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Zte XSS Mf971R Firmware
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy