CVEs-PoC/2021/CVE-2021-21729.md

### [CVE-2021-21729](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21729)
![](https://img.shields.io/static/v1?label=Product&message=ZXHN%20H168N%2CZXHN%20H108N&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=V2.5.5_BTMT1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=V3.5.0_EG1T5_TE%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CSRF&color=brightgreen)

### Description

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Zeyad-Azima/Zeyad-Azima