VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 20, 2021· Updated Jun 17, 2026

CVE-2021-21745

CVE-2021-21745

Description

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Zte/Mf971r Firmware5 versions
    cpe:2.3:o:zte:mf971r_firmware:1v1.0.0b06:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:zte:mf971r_firmware:1v1.0.0b06:*:*:*:*:*:*:*
    • cpe:2.3:o:zte:mf971r_firmware:2v1.0.0b03:*:*:*:*:*:*:*
    • cpe:2.3:o:zte:mf971r_firmware:s2v1.0.0b03:*:*:*:*:*:*:*
    • cpe:2.3:o:zte:mf971r_firmware:sv1.0.0b05:*:*:*:*:*:*:*
    • cpe:2.3:o:zte:mf971r_firmware:v1.0.0b05:*:*:*:*:*:*:*
  • ZTE/MF971Rdescription
  • Zte/MF971Rllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.