CVE-2021-21736

A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory settings, etc.. This affects ZXHN HS562 V1.0.0.0B2.0000, V1.0.0.0B3.0000E

CVSS v3 7.2 HIGH
CVSS v2.0 8.0 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

8.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:C

Exploitability : 8.0 / Impact : 8.5

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact COMPLETE

References

Link	Resource
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015964	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:zte:zxhn_hs562_firmware:1.0.0.0b2.0000:::::::*
	cpe:2.3:o:zte:zxhn_hs562_firmware:1.0.0.0b3.0000:::::::*

cpe:2.3:h:zte:zxhn_hs562:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-06-10 12:15

Updated : 2021-06-17 19:21

NVD link : CVE-2021-21736

Mitre link : CVE-2021-21736

CVE.ORG link : CVE-2021-21736

JSON object : View

Products Affected

zte

zxhn_hs562_firmware
zxhn_hs562

CWE

CWE-276

Incorrect Default Permissions

{"id": "CVE-2021-21736", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:C", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 8.5, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2021-06-10T12:15:08.490", "references": [{"url": "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1015964", "tags": ["Vendor Advisory"], "source": "psirt@zte.com.cn"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory settings, etc.. This affects ZXHN HS562 V1.0.0.0B2.0000, V1.0.0.0B3.0000E"}, {"lang": "es", "value": "Un producto de c\u00e1mara inteligente de ZTE est\u00e1 afectado por una vulnerabilidad de control de permisos y acceso. Debido al defecto de la gesti\u00f3n de permisos de usuario por parte de la aplicaci\u00f3n en la nube, los usuarios cuyos permisos de compartici\u00f3n han sido revocados pueden seguir controlando la c\u00e1mara, como reiniciar la c\u00e1mara, restaurar los ajustes de f\u00e1brica, etc. Esto afecta al producto ZXHN HS562 en las versiones V1.0.0.0B2.0000, V1.0.0B3.0000E"}], "lastModified": "2021-06-17T19:21:36.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zte:zxhn_hs562_firmware:1.0.0.0b2.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24F3CB00-7212-4F3A-928B-F0278ADF6085"}, {"criteria": "cpe:2.3:o:zte:zxhn_hs562_firmware:1.0.0.0b3.0000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9494CC2D-9E39-43C4-B21D-FFE658A9EBF0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zte:zxhn_hs562:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FD6DC75-6AAF-44A3-95A5-C19D34C56B47"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@zte.com.cn"}