CVE-2021-21732: ZTE Axon 11 5g Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axon 11 5G ZTE/CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys.

Affected products

• ZTE Axon 11 5g Firmware: before 2021.5.1 (fixed in 2021.5.1)

Published 2021-05-19. Last modified 2026-06-17.