ZTE ZXV10 b860a Firmware vulnerabilities

2 CVEs affecting ZTE ZXV10 b860a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21722, published 2021-01-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-3416, published 2019-09-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to…
CVE-2021-21722, published 2021-01-14. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further…