CVE-2021-21739

MEDIUM Year: 2021
CVSS v3 Score
4.6
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-345
View all →

Vulnerability Description

A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficiently verify the data reliability, attackers could replace an authenticated optical module on the equipment with an unauthenticated one, bypassing system authentication and detection, thus affecting signal transmission. This affects: <ZXCTN 6120H><V5.10.00B24>

Related Vulnerabilities

CVE-2022-28385

MEDIUM
CVSS:4.6(Medium)

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive (containing the Windows and ...

CWE-3452022

CVE-2020-3174

MEDIUM
CVSS:4.7(Medium)

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. T...

CWE-3452020

CVE-2016-3016

MEDIUM
CVSS:4.4(Medium)

IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker ...

CWE-3452016

CVE-2018-10626

MEDIUM
CVSS:4.4(Medium)

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired im...

CWE-3452018

CVE-2019-16000

MEDIUM
CVSS:4.4(Medium)

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted de...

CWE-3452019

CVE-2019-1880

MEDIUM
CVSS:4.4(Medium)

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System (UCS) C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affect...

CWE-3452019