ZXMP M721 vulnerabilities
We track 2 vulnerabilities in ZXMP M721 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2022.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest ZXMP M721 vulnerabilities
- 7.5 High severity
ZXMP M721: Insertion of Sensitive Information into Log File
ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled, an attacker could use this vulnerability to log in to the device to obtain sensitive information.
- 8.8 High severity
ZXMP M721: Incorrect Authorization
ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users to?ignore the modification?of?the file permission configuration,