CVE-2021-21732
High
Description
A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axon 11 5G ZTE/CN_P725A12/P725A12:10/QKQ1.200816.002/20201116.175317:user/release-keys.
SeverityHigh
CVSS7.5
Exploit probability—
ProductZte Axon 11 5g Firmware
PublishedMay 19, 2021
First seenMay 19, 2021
How to fix
Update
- zte axon_11_5g_firmware2021.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zte axon_11_5g_firmware | v < 2021.5.1 | 2021.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.