CVE-2021-21722

Name of the Vulnerable Software and Affected Versions ZTE Smart STB version V2.1-T V0032.1.1.04 jiangsuTelecom

Description The ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, allowing attackers to obtain sensitive user information for further information detection and attacks.

Recommendations For version V2.1-T V0032.1.1.04 jiangsuTelecom, consider updating to a newer version that fully verifies the log to prevent information leaks. As a temporary workaround, restrict access to sensitive user information to minimize the risk of exploitation.