CVE-2021-21723: ZTE ZXR10 9904-S Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affects: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S; all versions up to V1.01.10.B12.

Affected products

• ZTE ZXR10 9904-S Firmware: up to and including v1.01.10.b12
• ZTE ZXR10 9904 Firmware: up to and including v1.01.10.b12
• ZTE ZXR10 9908-S Firmware: up to and including v1.01.10.b12
• ZTE ZXR10 9908 Firmware: up to and including v1.01.10.b12
• ZTE ZXR10 9916 Firmware: up to and including v1.01.10.b12

Published 2021-01-26. Last modified 2026-06-17.