CVE-2021-21748

—

CVSS 3.1

9.8 critical

EPSS

2%p77

Published

Oct 20, 2021 (Oct 20, 2021)

Modified

Jun 17, 2026

Description

ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code.

Vendors: zte
Products: mf971r firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news2 stories

Vulnerability Spotlight: Multiple vulnerabilities in ZTE MF971R LTE router

Cisco TalosOct 18, 19:03 UTC · Oct 18, 2021Vulnerability in the wildCVE-2021-21748 CVE-2021-21745

60

Deep dive: Vulnerabilities in ZTE router could lead to complete attacker control of the device

Cisco TalosMar 7, 16:45 UTC · Mar 7, 2022Vulnerability CVE-2021-21748 CVE-2021-21745

35