CVE-2021-35035
MEDIUM4.9CVSS v3
4.0CVSS v2
0.07%
EPSS (exploit probability)
CWE-312CWE
Description
A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Zyxel | Zyxel NBG6604 | — |
versionEndExcluding=1.00\(abir.9\)c0 | 1.00\(abir.9\)c0 | Patched |