High · 7.4 CVE-2021-35034 EUVD-2021-21681GHSA-38gc-w4h9-7pmf

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access t…

Published Dec 29, 2021 · Updated Aug 4, 2024 · Assigned by Zyxel

Vendor: Zyxel Product: NBG6604 series firmware Category: Network devices

Description

An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.

Affected products

Vendor	Product	Affected	Fixed
Zyxel	NBG6604 series firmware	1.00(ABIR.8)C0	—

References

https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml