CVE-2021-21728: ZTE ZXA10 c300m Firmware

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This affects: ZXA10 C300M all versions up to V4.3P8.

Affected products

• ZTE ZXA10 c300m Firmware: before 4.5 (fixed in 4.5)

Published 2021-04-09. Last modified 2026-06-17.