Medium severity · published May 19, 2021
CVE-2021-21733
The management system of ZXCDN is impacted by the information leak vulnerability
4.9
CVSS
0.8%
EPSS
No
On KEV
Description
The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some sensitive information. This affects ZXCDN V7.01 all versions up to IAMV7.01.01.02.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZX
Zxcdn · Zte
7.01 before iamv7.01.02.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-21733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-21733
Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015304
More from Zxcdn
9.8
CVE-2025-46581
ZTE ZXCDN product has a Struts RCE Vulnerability