PT-2021-14733
CVE-2021-21722
·
تاريخ النشر
2021-01-14
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
ZTE Smart STB version V2.1-T V0032.1.1.04 jiangsuTelecom
Description
The ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, allowing attackers to obtain sensitive user information for further information detection and attacks.
Recommendations
For version V2.1-T V0032.1.1.04 jiangsuTelecom, consider updating to a newer version that fully verifies the log to prevent information leaks. As a temporary workaround, restrict access to sensitive user information to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾