VYPR
← All advisories
High severity7.8NVD Advisory· Published Nov 23, 2021· Updated Jun 17, 2026

CVE-2021-35033

CVE-2021-35033

Description

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the device, or if the remote assistance feature had been enabled by an authenticated user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • Zyxel/Nbg6818 Firmware
    cpe:2.3:o:zyxel:nbg6818_firmware:*:*:*:*:*:*:*:*
    Range: <1.00\(absc.5\)c0
  • Zyxel/Nbg7815 Firmware
    cpe:2.3:o:zyxel:nbg7815_firmware:*:*:*:*:*:*:*:*
    Range: <1.00\(absk.7\)c0
  • Zyxel/Wsq20 Firmware
    cpe:2.3:o:zyxel:wsq20_firmware:*:*:*:*:*:*:*:*
    Range: <1.00\(abof.11\)c0
  • Zyxel/Wsq50 Firmware
    cpe:2.3:o:zyxel:wsq50_firmware:*:*:*:*:*:*:*:*
    Range: <2.20\(abkj.7\)c0
  • Zyxel/Wsq60 Firmware
    cpe:2.3:o:zyxel:wsq60_firmware:*:*:*:*:*:*:*:*
    Range: <2.20\(abnd.8\)c0
  • Zyxel/Wsr30 Firmware
    cpe:2.3:o:zyxel:wsr30_firmware:*:*:*:*:*:*:*:*
    Range: <1.00\(abmy.12\)c0
  • Zyxel/WSQ50llm-create
  • Zyxel/WSQ60llm-create
  • Zyxel/WSR30llm-create
  • Zyxel/NBG6818llm-fuzzy
  • Zyxel/NBG7815llm-fuzzy
  • Zyxel/WSQ20llm-fuzzy
  • Zyxel/NBG6818 series firmwarev5
    Range: 1.00(ABSC.0)C0 through 1.00(ABSC.4)C0
  • Zyxel/NBG7815 series firmwarev5
    Range: 1.00(ABSK.0)C0 through 1.00(ABSK.6)C0
  • Zyxel/WSQ20 series firmwarev5
    Range: 1.00(ABOF.0)C0 through 1.00(ABOF.10)C0
  • Zyxel/WSQ50 series firmwarev5
    Range: 1.00(ABKJ.0)C0 through 2.20(ABKJ.6)C0
  • Zyxel/WSQ60 series firmwarev5
    Range: 1.00(ABND.0)C0 through 2.20(ABND.7)C0
  • Zyxel/WSR30 series firmwarev5
    Range: 1.00(ABMY.0)C0 through 1.00(ABMY.11)C0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.