Auth bypass in Zyxel Nbg6818
CVE-2021-35033
A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles t…
EPSS: 0.004 (32.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Zyxel Nbg6818
- Zyxel Nbg6818_firmware
- Zyxel Nbg6818 Series Firmware — versions 1.00(ABSC.0)C0 through 1.00(ABSC.4)C0
- Zyxel Nbg7815
- Zyxel Nbg7815_firmware
- Zyxel Nbg7815 Series Firmware — versions 1.00(ABSK.0)C0 through 1.00(ABSK.6)C0
- Zyxel Wsq20
- Zyxel Wsq20_firmware
- Zyxel Wsq20 Series Firmware — versions 1.00(ABOF.0)C0 through 1.00(ABOF.10)C0
- Zyxel Wsq50
Weakness classification (CWE)
References
- security@zyxel.com.tw (x_refsource_CONFIRM, Vendor Advisory)
- security@zyxel.com.tw (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-35033?
- CVE-2021-35033 is a high-severity vulnerability in Zyxel Nbg6818, classified under CWE-260. CVSS score: 7.8/10. Published 2021-11-23.
- How severe is CVE-2021-35033?
- High severity. CVSS v3 base score is 7.8 out of 10.