CVE:CVE-2021-21734
CNNVD:CNNVD-202105-1951
ZTE PON MDU是中国中兴（ZTE）公司的主要应用于网络主干交换机之间，以及网络汇聚层交换机接入到网络主干交换机（核心交换机）的连接。
ZTE PON MDU中存在加密问题漏洞，该漏洞源于中兴通讯部分PON MDU设备以明文方式存储敏感信息，有登录权限的用户可以通过输入命令获取敏感信息。以下产品及型号受到影响: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22、ZXA10 F822 V1.4.3T6、ZXA10 F819 V1.2.1T5、ZXA10 F832 V1.1.1T7、ZXA10 F839 V1.1.0T8、ZXA10 F809 V3.2.1T1、ZXA10 F822P V1.1.1T7、ZXA10 F832 V2.00.00.01.
solution:Upgrade zte zxa10_f821_firmware to a higher version than 1.7.0p3t22,and avoid the version 1.7.0p3t22; Upgrade zte zxa10_f822_firmware to a higher version than 1.4.3t6,and avoid the version 1.4.3t6; Upgrade zte zxa10_f819_firmware to a higher version than 1.2.1t5,and avoid the version 1.2.1t5; Upgrade zte zxa10_f832_firmware to a higher version than 1.1.1t7,and avoid the version 1.1.1t7; Upgrade zte zxa10_f839_firmware to a higher version than 1.1.0t8,and avoid the version 1.1.0t8; Upgrade zte zxa10_f809_firmware to a higher version than 3.2.1t1,and avoid the version 3.2.1t1; Upgrade zte zxa10_f822p_firmware to a higher version than 1.1.1t7,and avoid the version 1.1.1t7; Upgrade zte zxa10_f832v2_firmware to a higher version than 2.00.00.01,and avoid the version 2.00.00.01