CVE-2021-35033

🗓️ 23 Nov 2021 21:20:38Reported by ZyxelType

Zyxel router firmware vulnerability allowing root acces

Reporter	Title	Published	Views	Family All 7
CNNVD	多款Zyxel产品授权问题漏洞	23 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-35033	23 Nov 202121:20	–	cvelist
EUVD	EUVD-2021-21680	7 Oct 202500:30	–	euvd
NVD	CVE-2021-35033	23 Nov 202122:15	–	nvd
Prion	Design/Logic Flaw	23 Nov 202122:15	–	prion
Positive Technologies	PT-2021-20804 · Zyxel · Zyxel Wsq50 +5	23 Nov 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-35033	6 Feb 202503:21	–	redhatcve

NVD

Node

zyxel nbg6818_firmwareRange<1.00(absc.5)c0

AND

zyxel nbg6818Match-

Node

zyxel nbg7815_firmwareRange<1.00(absk.7)c0

AND

zyxel nbg7815Match-

Node

zyxel wsq20_firmwareRange<1.00(abof.11)c0

AND

zyxel wsq20Match-

Node

zyxel wsq50_firmwareRange<2.20(abkj.7)c0

AND

zyxel wsq50Match-

Node

zyxel wsq60_firmwareRange<2.20(abnd.8)c0

AND

zyxel wsq60Match-

Node

zyxel wsr30_firmwareRange<1.00(abmy.12)c0

AND

zyxel wsr30Match-

[
  {
    "product": "NBG6818 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABSC.0)C0 through 1.00(ABSC.4)C0"
      }
    ]
  },
  {
    "product": "NBG7815 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABSK.0)C0 through 1.00(ABSK.6)C0"
      }
    ]
  },
  {
    "product": "WSQ20 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABOF.0)C0 through 1.00(ABOF.10)C0"
      }
    ]
  },
  {
    "product": "WSQ50 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABKJ.0)C0 through 2.20(ABKJ.6)C0"
      }
    ]
  },
  {
    "product": "WSQ60 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABND.0)C0 through 2.20(ABND.7)C0"
      }
    ]
  },
  {
    "product": "WSR30 series firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "1.00(ABMY.0)C0 through 1.00(ABMY.11)C0"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/support/Zyxel_security_advisory_for_pre-configured_password_management_vulnerability_of_home_routers_and_WiFi_systems.shtml
tenable	www.tenable.com/security/research/tra-2022-06

21 Nov 2024 06:11Current

7.4High risk

Vulners AI Score7.4

CVSS 26.9

CVSS 3.17.8

EPSS0.00115