This vulnerability allows an unauthenticated attacker to trigger a denial-of-service condition on various ZTE router models by sending an oversized POST request to the web interface. The attack causes the management interface to hang and require a reboot to recover. The issue impacts firmware versions prior to 2022, though the vendor claims devices are not vulnerable from March 23, 2021 onward. No CVSS score or official remediation guidance is available, and no known exploits in the wild have been reported.

The impact is a denial-of-service condition on the router's management interface, rendering it unresponsive until reboot. This could disrupt administrative access to the device, potentially delaying management and response actions. There is no indication of code execution or data compromise from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor states devices are not vulnerable since March 23, 2021, but operator firmware may vary, so verifying firmware version and applying any available updates is recommended. If no update is available, limiting access to the management interface and monitoring for unusual POST request sizes may reduce risk.