CVE-2021-35036

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
ZyxelCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
VendorProductVersion
zyxelax7501-b0_firmware
𝑥
< 5.17\(abpc.2\)c0
zyxeldx3301-t0_firmware
𝑥
< 5.50\(abvy.3\)c0
zyxeldx5401-b0_firmware
𝑥
< 5.17\(abyo.2\)c0
zyxelemg3525-t50b_firmware
𝑥
< 5.50\(abpm.7\)c0
zyxelemg5523-t50b_firmware
𝑥
< 5.50\(abpm.7\)c0
zyxelemg5723-t50k_firmware
𝑥
< 5.50\(abom.8\)c0
zyxelep240p_firmware
𝑥
< 5.40\(abvh.0\)c0a03
zyxelex5401-b0_firmware
𝑥
< 5.17\(abyo.2\)c0
zyxelex5501-b0_firmware
𝑥
< 5.17\(abry.3\)c0
zyxellte3301-plus_firmware
𝑥
< 1.00\(abqu.6\)c0
zyxellte5388-m804_firmware
𝑥
< 1.00\(abra.6\)c0
zyxellte5388-s905_firmware
𝑥
< 1.00\(abvi.6\)c0
zyxellte5398-m904_firmware
𝑥
< 1.00\(abqv.2\)c0
zyxellte7240-m403_firmware
𝑥
< 2.00\(abmg.6\)c0
zyxellte7461-m602_firmware
𝑥
< 2.00\(abqn.6\)c0
zyxellte7480-m804_firmware
𝑥
< 1.00\(abra.6\)c0
zyxellte7480-s905_firmware
𝑥
< 2.00\(abqt.6\)c0
zyxellte7485-s905_firmware
𝑥
< 1.00\(abvn.6\)c0
zyxelnr5101_firmware
𝑥
< 1.00\(abvc.6\)c0
zyxelnr7101_firmware
𝑥
< 1.00\(abuv.7\)c0
zyxelnr7102_firmware
𝑥
< 1.00\(abyd.2\)c0
zyxelpm7300-t0_firmware
𝑥
< 5.42\(acbc.1\)c0
zyxelpmg5317-t20b_firmware
𝑥
< 5.40\(abki.4\)c0
zyxelpmg5617-t20b2_firmware
𝑥
< 5.41\(acbb.1\)c0
zyxelpmg5617ga_firmware
𝑥
< 5.40\(abna.2\)c0
zyxelpmg5622ga_firmware
𝑥
< 5.40\(abnb.2\)c0
zyxelvmg3625-t50b_firmware
𝑥
< 5.50\(abtl.0\)b2r
zyxelvmg3927-t50k_firmware
𝑥
< 5.50\(abom.8\)c0
zyxelvmg8623-t50b_firmware
𝑥
< 5.50\(abpm.7\)c0
zyxelvmg8825-t50k_firmware
𝑥
< 5.50\(abom.8\)c0
zyxelvmg3625-t50b_firmware
𝑥
< 5.50\(accr.0\)b4
zyxelvmg3625-t50b_firmware
𝑥
< 5.50\(abpm.7\)c0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability