Zxmp M721 Firmware vulnerabilities

2 known vulnerabilities in Zxmp M721 Firmware from ZTE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ZXMP M721: Insertion of Sensitive Information into Log File

  CVE-2022-23141Jul 15, 2022ZXMP M721

  ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled, an attacker could use this vulnerability to log in to the device to obtain sensitive information.

• 8.8 High severity

  ZXMP M721: Incorrect Authorization

  CVE-2022-23139May 12, 2022ZXMP M721

  ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users to?ignore the modification?of?the file permission configuration,