How severe is CVE-2021-35034?

CVE-2021-35034 has a CVSS v3 score of 7.4 (HIGH).

CVE-2021-35034

Name: nbg6604
Author: zyxel

7.4HIGH

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.

发布于: 12/29/2021更新于: 11/21/2024

描述

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.

AI分析AI驱动

受影响产品

zyxelnbg6604_firmware

zyxelnbg6604

参考资料

https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml
Vendor Advisory
https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml
Vendor Advisory