Security Advisory

CVE-2021-21745

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-20 15:20:50
Last updated 2024-08-03 18:23:29
Assigner zte
State PUBLISHED

Description

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.