Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3020▼ 63 respecto a la semana anterior

Críticas / altas1413▲ 57 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-21749	Modificada	Crítica (9.8)	1.6%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.
CVE-2021-21748	Modificada	Crítica (9.8)	1.8%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.
CVE-2021-21745	Modificada	Media (4.3)	56%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.
CVE-2021-21744	Modificada	Alta (7.5)	0.83%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the device, causing some security functions of the device to be disabled.
CVE-2021-21743	Modificada	Media (4.3)	0.85%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a specially crafted HTTP request.
CVE-2021-21747	Modificada	Media (6.1)	0.58%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.
CVE-2021-21746	Modificada	Media (6.1)	0.58%	—	ZTE Mf971r Firmware	20/10/2021	17/6/2026	ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.