CVE-2021-21737: ZTE ZXV10 b860h v5.0 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83011303.0010, V83011303.0016

Affected products

• ZTE ZXV10 b860h v5.0 Firmware: version v83011303.0010 only; version v83011303.0016 only

Published 2021-06-24. Last modified 2026-06-17.