CVE-2021-35036

Description

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

References

https://github.com/minanagehsalalma/zyxel-cve-2021-35036-super-admin-password-leak

https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-cleartext-storage-of-information-vulnerability

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-21683

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS