High 7.5Published Dec 31, 2025

CVE-2021-47740KZTech JT3500V 4G LTE CPE 2.0.1 Insufficient Session Expiration Vulnerability

Updated under an hour ago (Oct 26, 2026, 3:10 PM ET)

Does this affect you?

It affects KZ Broadband Technologies, Ltd. JT3500V and 14 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for KZ Broadband Technologies, Ltd. JT3500V

Exploited in the last 30 days

KZTech JT3500V 4G LTE CPE 2.0.1 contains a session management vulnerability that allows attackers to reuse old session credentials without proper expiration. Attackers can exploit the weak session handling to maintain unauthorized access and potentially compromise device authentication mechanisms.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-613
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Deferred
Record last updated: Jan 2, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

KZ Broadband Technologies, Ltd. JT3500V kz_broadband_technologies:jt3500v (from the name)	2.0.1B1064; 2.0.1B1047	CNA record
KZ Broadband Technologies, Ltd. AM6200M kz_broadband_technologies:am6200m (from the name)	2.0.0B3210	CNA record
KZ Broadband Technologies, Ltd. AM6000N kz_broadband_technologies:am6000n (from the name)	2.0.0B3042	CNA record
KZ Broadband Technologies, Ltd. AM5000W kz_broadband_technologies:am5000w (from the name)	2.0.0B3037	CNA record
KZ Broadband Technologies, Ltd. AM4200M kz_broadband_technologies:am4200m (from the name)	2.0.0B2996	CNA record
KZ Broadband Technologies, Ltd. AM4100V kz_broadband_technologies:am4100v (from the name)	2.0.0B2988	CNA record
KZ Broadband Technologies, Ltd. AM3500MW kz_broadband_technologies:am3500mw (from the name)	2.0.0B1092	CNA record
KZ Broadband Technologies, Ltd. AM3410V kz_broadband_technologies:am3410v (from the name)	2.0.0B1085	CNA record
KZ Broadband Technologies, Ltd. AM3300V kz_broadband_technologies:am3300v (from the name)	2.0.0B1060	CNA record
KZ Broadband Technologies, Ltd. AM3100E kz_broadband_technologies:am3100e (from the name)	2.0.0B981	CNA record
1–10 of 15

References

References

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5646.php	third-party-advisory
https://packetstormsecurity.com/files/161892/	exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/198471	vdb-entry
http://www.kzbtech.com/	product
https://www.jatontech.com/	product
https://neotel.mk/	product
https://www.vulncheck.com/advisories/kztech-jtv-g-lte-cpe-insufficient-session-expiration-vulnerability	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.