CVE-2021-21740

Severity: low (CVSS 2.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-08-09 · updated 2026-06-17
Weakness: CWE-59

Description

There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information leak.

Affected products

ZXHN H2640: 10.0.0c6_ty

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1017244
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1017244

Get alerted when CVE-2021-21740 or the next vulnerability affects your stack