MEDIUM · 6.5

CVE-2021-35036

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuratio...

Vulnerability Description

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ZyxelAx7501-B0 Firmware< 5.17\(abpc.2\)c0
ZyxelAx7501-B0-
ZyxelDx3301-T0 Firmware< 5.50\(abvy.3\)c0
ZyxelDx3301-T0-
ZyxelDx5401-B0 Firmware< 5.17\(abyo.2\)c0
ZyxelDx5401-B0-
ZyxelEmg3525-T50B Firmware< 5.50\(abpm.7\)c0
ZyxelEmg3525-T50B-
ZyxelEmg5523-T50B Firmware< 5.50\(abpm.7\)c0
ZyxelEmg5523-T50B-
ZyxelEmg5723-T50K Firmware< 5.50\(abom.8\)c0
ZyxelEmg5723-T50K-
ZyxelEp240P Firmware< 5.40\(abvh.0\)c0a03
ZyxelEp240P-
ZyxelEx5401-B0 Firmware< 5.17\(abyo.2\)c0
ZyxelEx5401-B0-
ZyxelEx5501-B0 Firmware< 5.17\(abry.3\)c0
ZyxelEx5501-B0-
ZyxelLte3301-Plus Firmware< 1.00\(abqu.6\)c0
ZyxelLte3301-Plus-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-35036?

CVE-2021-35036 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuratio...

How severe is CVE-2021-35036?

CVE-2021-35036 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-35036?

Check the references section above for vendor advisories and patch information. Affected products include: Zyxel Ax7501-B0 Firmware, Zyxel Ax7501-B0, Zyxel Dx3301-T0 Firmware, Zyxel Dx3301-T0, Zyxel Dx5401-B0 Firmware.