CVE-2021-21724: ZTE ZXR10 8900e Firmware

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to V3.03.20R2B30P1.

Affected products

• ZTE ZXR10 8900e Firmware: up to and including 3.03.20r2b30p1

Published 2021-02-26. Last modified 2026-06-17.