CVE-2021-21746 | BDVDB-2026-162849 Detail

MF971R

Description#

ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information.

No impact statement in the source data.

No weakness recorded in the source data.

No public exploit known

No score available.

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 48.1.

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Not classified

No specific action is recorded in the source data. Check the references for vendor guidance.

Vulnerable
BD_ZTE_MF971RV1.0.0B05, BD_PLKPLMF971R1V1.0.0B06, BD_MF971R2V1.0.0B03, BD_ZTE_MF971RS2V1.0.0B03, BD_ZTE_MF971RSV1.0.0B05
Fixed
Not stated

Not available

Not available

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).