CVE-2021-21733

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-05-19 · updated 2026-06-17
Weakness: CWE-200

Description

The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some sensitive information. This affects ZXCDN V7.01 all versions up to IAMV7.01.01.02.

Affected products

ZTE ZXCDN: from 7.01 before iamv7.01.02.02 — fixed in iamv7.01.02.02

How to fix

Upgrade to a fixed version: ZTE ZXCDN iamv7.01.02.02. Check the vendor advisory for mitigations.

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015304
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015304

Get alerted when CVE-2021-21733 or the next vulnerability affects your stack