CVE-2021-47740: Kz Broadband Technologies, Ltd AM3000M

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms.

Affected products

• Kz Broadband Technologies, Ltd AM3000M: version 2.0.0B21 only
• Kz Broadband Technologies, Ltd AM3100E: version 2.0.0B981 only
• Kz Broadband Technologies, Ltd AM3100V: version 2.0.0B946 only
• Kz Broadband Technologies, Ltd AM3300V: version 2.0.0B1060 only
• Kz Broadband Technologies, Ltd AM3410V: version 2.0.0B1085 only
• Kz Broadband Technologies, Ltd AM3500MW: version 2.0.0B1092 only
• Kz Broadband Technologies, Ltd AM4100V: version 2.0.0B2988 only
• Kz Broadband Technologies, Ltd AM4200M: version 2.0.0B2996 only
• Kz Broadband Technologies, Ltd AM5000W: version 2.0.0B3037 only
• Kz Broadband Technologies, Ltd AM6000N: version 2.0.0B3042 only
• Kz Broadband Technologies, Ltd AM6200M: version 2.0.0B3210 only
• Kz Broadband Technologies, Ltd JT3500V: version 2.0.1B1064 only; version 2.0.1B1047 only
• Kz Broadband Technologies, Ltd KZ3120R: version 2.0.0B01 only
• Kz Broadband Technologies, Ltd KZ3220M: version 2.0.0B04 only
• Kz Broadband Technologies, Ltd KZ7621U: version 2.0.0B14 only

Published 2025-12-31. Last modified 2026-06-17.