CVE-2021-35029

🗓️ 02 Jul 2021 10:29:07Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 66 Views

An authentication bypass vulnerability in Zyxel USG/Zywall series firmwar

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-35029	28 Jun 202113:17	–	circl
CNNVD	ZyXEL ZyWALL USG 授权问题漏洞	2 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-35029	2 Jul 202110:29	–	cvelist
EUVD	EUVD-2021-21676	7 Oct 202500:30	–	euvd
NVD	CVE-2021-35029	2 Jul 202111:15	–	nvd
OSV	CVE-2021-35029	2 Jul 202111:15	–	osv
Prion	Authentication flaw	2 Jul 202111:15	–	prion
RedhatCVE	CVE-2021-35029	6 Feb 202503:13	–	redhatcve

NVD

Node

zyxel usg1900_firmwareRange4.35–4.64

AND

zyxel usg1900Match-

Node

zyxel usg1100_firmwareRange4.35–4.64

AND

zyxel usg1100Match-

Node

zyxel usg310_firmwareRange4.35–4.64

AND

zyxel usg310Match-

Node

zyxel usg210_firmwareRange4.35–4.64

AND

zyxel usg210Match-

Node

zyxel usg110_firmwareRange4.35–4.64

AND

zyxel usg110Match-

Node

zyxel usg40_firmwareRange4.35–4.64

AND

zyxel usg40Match-

Node

zyxel usg40w_firmwareRange4.35–4.64

AND

zyxel usg40wMatch-

Node

zyxel usg60_firmwareRange4.35–4.64

AND

zyxel usg60Match-

Node

zyxel usg60w_firmwareRange4.35–4.64

AND

zyxel usg60wMatch-

Node

zyxel usg300_firmwareRange4.35–4.64

AND

zyxel usg300Match-

Node

zyxel usg1000_firmwareRange4.35–4.64

AND

zyxel usg1000Match-

Node

zyxel usg2000_firmwareRange4.35–4.64

AND

zyxel usg2000Match-

Node

zyxel usg20_firmwareRange4.35–4.64

AND

zyxel usg20Match-

Node

zyxel usg20w_firmwareRange4.35–4.64

AND

zyxel usg20wMatch-

Node

zyxel usg50_firmwareRange4.35–4.64

AND

zyxel usg50Match-

Node

zyxel usg100_firmwareRange4.35–4.64

AND

zyxel usg100Match-

Node

zyxel usg200_firmwareRange4.35–4.64

AND

zyxel usg200Match-

Node

zyxel usg_flex_100_firmwareRange4.35–5.01

AND

zyxel usg_flex_100Match-

Node

zyxel usg_flex_200_firmwareRange4.35–5.01

AND

zyxel usg_flex_200Match-

Node

zyxel usg_flex_500_firmwareRange4.35–5.01

AND

zyxel usg_flex_500Match-

Node

zyxel usg_flex_100w_firmwareRange4.35–5.01

AND

zyxel usg_flex_100wMatch-

Node

zyxel usg_flex_700_firmwareRange4.35–5.01

AND

zyxel usg_flex_700Match-

Node

zyxel zywall_atp100_firmwareRange4.35–5.01

AND

zyxel zywall_atp100Match-

Node

zyxel zywall_atp100w_firmwareRange4.35–5.01

AND

zyxel zywall_atp100wMatch-

Node

zyxel zywall_atp200_firmwareRange4.35–5.01

AND

zyxel zywall_atp200Match-

Node

zyxel zywall_atp500_firmwareRange4.35–5.01

AND

zyxel zywall_atp500Match-

Node

zyxel zywall_atp700_firmwareRange4.35–5.01

AND

zyxel zywall_atp700Match-

Node

zyxel zywall_atp800_firmwareRange4.35–5.01

AND

zyxel zywall_atp800Match-

Node

zyxel zywall_vpn50_firmwareRange4.35–5.01

AND

zyxel zywall_vpn50Match-

Node

zyxel zywall_vpn100_firmwareRange4.35–5.01

AND

zyxel zywall_vpn100Match-

Node

zyxel zywall_vpn300_firmwareRange4.35–5.01

AND

zyxel zywall_vpn300Match-

Node

zyxel usg20-vpn_firmwareRange4.35–5.01

AND

zyxel usg20-vpnMatch-

Node

zyxel usg20w-vpn_firmwareRange4.35–5.01

AND

zyxel usg20w-vpnMatch-

Node

zyxel usg2200-vpn_firmwareRange4.35–5.01

AND

zyxel usg2200-vpnMatch-

Node

zyxel zywall_110_firmwareRange4.35–5.01

AND

zyxel zywall_110Match-

Node

zyxel zywall_310_firmwareRange4.35–5.01

AND

zyxel zywall_310Match-

Node

zyxel zywall_1100_firmwareRange4.35–5.01

AND

zyxel zywall_1100Match-

[
  {
    "product": "USG/Zywall series Firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.35 through 4.64"
      }
    ]
  },
  {
    "product": "USG FLEX series Firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.35 through 5.01"
      }
    ]
  },
  {
    "product": "ATP series Firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.35 through 5.01"
      }
    ]
  },
  {
    "product": "VPN series Firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "4.35 through 5.01"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/support/Zyxel_security_advisory_for_attacks_against_security_appliances.shtml

21 Nov 2024 06:11Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.00196

CWE-287