CVE Vulnerabilities

CVE-2021-21722

Insertion of Sensitive Information into Log File

Published: Jan 14, 2021 | Modified: Nov 21, 2024
CVSS 3.x
4.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-T_V0032.1.1.04_jiangsuTelecom.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Zxv10_b860a_firmware Zte v2.1-t_v0032.1.1.04_jiangsutelecom (including) v2.1-t_v0032.1.1.04_jiangsutelecom (including)

Potential Mitigations

References