ZTE ZXIN10 CMS vulnerabilities

2 CVEs affecting ZTE ZXIN10 CMS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21751, published 2021-12-27.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-21751, published 2021-12-27. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configuring the large screen page, an attacker with high…
• CVE-2021-21750, published 2021-12-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege, an attacker with ordinary user permissions could exploit…