Unrated severityNVD Advisory· Published Dec 29, 2021· Updated Aug 4, 2024

CVE-2021-35034

Description

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.

Affected products

Zyxel/NBG6604llm-fuzzy
Zyxel/NBG6604 series firmwarev5
Range: 1.00(ABIR.8)C0

Patches

Vulnerability mechanics

References

www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtmlmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000