CVE-2021-35035

Wednesday, December 29, 2021

4.9

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Summary

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file.

Affected Software

Vendor	Product	Version Range	Status
Zyxel	NBG6604 series firmware	`1.00(ABIR.8)C0`	affected

Weaknesses

CWE-312: CWE-312: Cleartext Storage of Sensitive Information

ADP Enrichment

CVE Program Container

Additional References

https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml

References

https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.

←Previous
Next→