CVEvulnerability
CVE-2021-35036
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-312
Description
A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.
Affected configurations
• zyxel ax7501-b0 firmware (< 5.17\(abpc.2\)c0)
• zyxel dx3301-t0 firmware (< 5.50\(abvy.3\)c0)
• zyxel dx5401-b0 firmware (< 5.17\(abyo.2\)c0)
• zyxel emg3525-t50b firmware (< 5.50\(abpm.7\)c0)
• zyxel emg5523-t50b firmware (< 5.50\(abpm.7\)c0)
• zyxel emg5723-t50k firmware (< 5.50\(abom.8\)c0)
• zyxel ep240p firmware (< 5.40\(abvh.0\)c0a03)
• zyxel ex5401-b0 firmware (< 5.17\(abyo.2\)c0)
• zyxel ex5501-b0 firmware (< 5.17\(abry.3\)c0)
• zyxel lte3301-plus firmware (< 1.00\(abqu.6\)c0)
• zyxel lte5388-m804 firmware (< 1.00\(abra.6\)c0)
• zyxel lte5388-s905 firmware (< 1.00\(abvi.6\)c0)
• zyxel lte5398-m904 firmware (< 1.00\(abqv.2\)c0)
• zyxel lte7240-m403 firmware (< 2.00\(abmg.6\)c0)
• zyxel lte7461-m602 firmware (< 2.00\(abqn.6\)c0)
• zyxel lte7480-m804 firmware (< 1.00\(abra.6\)c0)
• zyxel lte7480-s905 firmware (< 2.00\(abqt.6\)c0)
• zyxel lte7485-s905 firmware (< 1.00\(abvn.6\)c0)
• zyxel lte7490-m804 firmware (< v1.00\(abqy.5\)c0)
• zyxel nr5101 firmware (< 1.00\(abvc.6\)c0)
• zyxel nr7101 firmware (< 1.00\(abuv.7\)c0)
• zyxel nr7102 firmware (< 1.00\(abyd.2\)c0)
• zyxel pm7300-t0 firmware (< 5.42\(acbc.1\)c0)
• zyxel pmg5317-t20b firmware (< 5.40\(abki.4\)c0)
• zyxel pmg5617-t20b2 firmware (< 5.41\(acbb.1\)c0)
• zyxel pmg5617ga firmware (< 5.40\(abna.2\)c0)
• zyxel pmg5622ga firmware (< 5.40\(abnb.2\)c0)
• zyxel vmg3625-t50b firmware (< 5.50\(abtl.0\)b2r)
• zyxel vmg3927-t50k firmware (< 5.50\(abom.8\)c0)
• zyxel vmg8623-t50b firmware (< 5.50\(abpm.7\)c0)
• zyxel vmg8825-t50k firmware (< 5.50\(abom.8\)c0)
• zyxel vmg3625-t50b firmware (< 5.50\(accr.0\)b4)
• zyxel vmg3625-t50b firmware (< 5.50\(abpm.7\)c0)
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability Vendor Advisory
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability Vendor Advisory