CVE-2021-21740: ZTE Zxhn h2640 Firmware

Low severity, CVSS 2.4. EPSS: 0.4% chance of exploitation in the next 30 days.

There is an information leak vulnerability in the digital media player (DMS) of ZTE's residential gateway product. The attacker could insert the USB disk with the symbolic link into the residential gateway, and access unauthorized directory information through the symbolic link, causing information leak.

Affected products

• ZTE Zxhn h2640 Firmware: version 10.0.0c6_ty only

Published 2021-08-09. Last modified 2026-06-17.