CVE-2021-21737

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-24 · updated 2026-06-17
Weakness: CWE-276

Description

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83011303.0010, V83011303.0016

Affected products

ZXV10 B860H V5.0: v83011303.0010, v83011303.0016

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1016004
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1016004

Get alerted when CVE-2021-21737 or the next vulnerability affects your stack