CVE-2021-21750 Privilege escalation in ZXIN10 CMS
An attacker with ordinary user permissions can exploit improper timed task management to gain unauthorized access and escalate privileges in ZTE BigVideo Analysis.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21750?
CVE-2021-21750 is a high-severity vulnerability in ZXIN10 CMS, published on 27 Dec 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege, an attacker with ordinary user permissions could exploit this vulnerability to gain unauthorized access.
Weakness: CWE-269
Which versions are affected by CVE-2021-21750?
It affects 1 product.
Products include Zte Zxin10 Cms.
How do I fix CVE-2021-21750?
No fix has been published for CVE-2021-21750 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-21750 being exploited?
There is no known exploitation of CVE-2021-21750 in the wild and no public exploit code.
Other vulnerabilities in ZXIN10 CMS
Sources
Also known as GHSA-p6gw-24qr-9gfc.