← Zuruck zu CVEs

CVE-2021-47741

HIGH

7.5

Beschreibung

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclose the super user password and gain additional privileged functionalities.

CVE Details

CVSS v3.1 Bewertung7.5

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/31/2025

Zuletzt geandert12/31/2025

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-522

Referenzen

http://www.zblchina.com(disclosure@vulncheck.com)

https://web.archive.org/web/20211220094023/http://www.wd-thailand.com/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/49737(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/zbl-epon-onu-broadband-router-vr-privilege-escalation-via-configuration-endpoint(disclosure@vulncheck.com)

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5647.php(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.