CVE-2021-35034 — Zyxel / NBG6604 series firmware

CVE-2021-35034

Zyxel / NBG6604 series firmware PUBLISHED

Description (CNA)

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.

Affected (CNA)

Vendor / product	Versions
Zyxel / NBG6604 series firmware	affected 1.00(ABIR.8)C0

CWE

CWE-613

References

https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml

ADP enrichment

CVE

No English description supplied.

https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml