CVE-2021-21745

CVE-2021-21745 describes a Referer authentication bypass vulnerability in the ZTE MF971R product and its firmware. This flaw allows an unauthenticated attacker to perform unauthorized operations by tricking a user into clicking a malicious link, bypassing typical Cross-Site Request Forgery (CSRF) protections. Rated as Medium severity (CVSS 4.3), the attack requires user interaction but has low attack complexity, potentially leading to unauthorized information disclosure or modification. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist for detection, and the vulnerability has received minimal community discussion or media coverage.