ZTE ZXMP M721 Private Key Disclosure Vulnerability

A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to access the device's communication private key, leading to key exposure and compromised communication security.

Impact

Exploitation of this vulnerability allows for unauthorized access to the device's communication private key, which can undermine the security of encrypted communications.

Remediation

To address this vulnerability, users are advised to upgrade to version M721V5.40.010.001. Additionally, it is recommended to harden the SFTP configuration to prevent access to directories containing private keys.