CVE-2021-21742: ZTE Axon 30 Pro Message Service

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers could use this vulnerability to obtain some sensitive information of users by accessing specific pages.

Affected products

• ZTE Axon 30 Pro Message Service: version 5.3.1.2103091059 only

Published 2021-09-25. Last modified 2026-06-17.