High severity7.4NVD Advisory· Published Dec 29, 2021· Updated Jun 17, 2026

CVE-2021-35034

Description

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.

Affected products

Zyxel/NBG6604 series firmwarev5
Range: 1.00(ABIR.8)C0
Zyxel/NBG6604llm-fuzzy
Zyxel/Nbg6604 Firmware
cpe:2.3:o:zyxel:nbg6604_firmware:*:*:*:*:*:*:*:*
Range: <1.00\(abir.9\)c0

Patches

Vulnerability mechanics

References

www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000