NVD Vulnerability Detail
Search Exploit, PoC
CVE-2021-35036
Summary

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

Publication Date March 1, 2022, 4:15 p.m.
Registration Date March 2, 2022, 10 a.m.
Last Update Nov. 21, 2024, 3:11 p.m.
CVSS3.1 : MEDIUM
スコア 6.5
Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃に必要な特権レベル(PR) 低
利用者の関与(UI) 不要
影響の想定範囲(S) 変更なし
機密性への影響(C) 高
完全性への影響(I) なし
可用性への影響(A) なし
CVSS2.0 : LOW
Score 3.5
Vector AV:N/AC:M/Au:S/C:P/I:N/A:N
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 中
攻撃前の認証要否(Au) 単一
機密性への影響(C) 低
完全性への影響(I) なし
可用性への影響(A) なし
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:* 5.17\(abpc.2\)c0
execution environment
1 cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:* 5.50\(abvy.3\)c0
execution environment
1 cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:* 5.17\(abyo.2\)c0
execution environment
1 cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:* 5.50\(abpm.7\)c0
execution environment
1 cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:* 5.50\(abpm.7\)c0
execution environment
1 cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*
Configuration6 or higher or less more than less than
cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:* 5.50\(abom.8\)c0
execution environment
1 cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*
Configuration7 or higher or less more than less than
cpe:2.3:o:zyxel:ep240p_firmware:*:*:*:*:*:*:*:* 5.40\(abvh.0\)c0a03
execution environment
1 cpe:2.3:h:zyxel:ep240p:-:*:*:*:*:*:*:*
Configuration8 or higher or less more than less than
cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:* 5.17\(abyo.2\)c0
execution environment
1 cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*
Configuration9 or higher or less more than less than
cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:* 5.17\(abry.3\)c0
execution environment
1 cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:*
Configuration10 or higher or less more than less than
cpe:2.3:o:zyxel:lte3301-plus_firmware:*:*:*:*:*:*:*:* 1.00\(abqu.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte3301-plus:-:*:*:*:*:*:*:*
Configuration11 or higher or less more than less than
cpe:2.3:o:zyxel:lte5388-m804_firmware:*:*:*:*:*:*:*:* 1.00\(abra.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte5388-m804:-:*:*:*:*:*:*:*
Configuration12 or higher or less more than less than
cpe:2.3:o:zyxel:lte5388-s905_firmware:*:*:*:*:*:*:*:* 1.00\(abvi.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte5388-s905:-:*:*:*:*:*:*:*
Configuration13 or higher or less more than less than
cpe:2.3:o:zyxel:lte5398-m904_firmware:*:*:*:*:*:*:*:* 1.00\(abqv.2\)c0
execution environment
1 cpe:2.3:h:zyxel:lte5398-m904:-:*:*:*:*:*:*:*
Configuration14 or higher or less more than less than
cpe:2.3:o:zyxel:lte7240-m403_firmware:*:*:*:*:*:*:*:* 2.00\(abmg.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte7240-m403:-:*:*:*:*:*:*:*
Configuration15 or higher or less more than less than
cpe:2.3:o:zyxel:lte7461-m602_firmware:*:*:*:*:*:*:*:* 2.00\(abqn.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte7461-m602:-:*:*:*:*:*:*:*
Configuration16 or higher or less more than less than
cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:* 1.00\(abra.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:*
Configuration17 or higher or less more than less than
cpe:2.3:o:zyxel:lte7480-s905_firmware:*:*:*:*:*:*:*:* 2.00\(abqt.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte7480-s905:-:*:*:*:*:*:*:*
Configuration18 or higher or less more than less than
cpe:2.3:o:zyxel:lte7485-s905_firmware:*:*:*:*:*:*:*:* 1.00\(abvn.6\)c0
execution environment
1 cpe:2.3:h:zyxel:lte7485-s905:-:*:*:*:*:*:*:*
Configuration19 or higher or less more than less than
cpe:2.3:o:zyxel:lte7490-m804_firmware:*:*:*:*:*:*:*:* v1.00\(abqy.5\)c0
execution environment
1 cpe:2.3:h:zyxel:lte7490-m804:-:*:*:*:*:*:*:*
Configuration20 or higher or less more than less than
cpe:2.3:o:zyxel:nr5101_firmware:*:*:*:*:*:*:*:* 1.00\(abvc.6\)c0
execution environment
1 cpe:2.3:h:zyxel:nr5101:-:*:*:*:*:*:*:*
Configuration21 or higher or less more than less than
cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:* 1.00\(abuv.7\)c0
execution environment
1 cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:*
Configuration22 or higher or less more than less than
cpe:2.3:o:zyxel:nr7102_firmware:*:*:*:*:*:*:*:* 1.00\(abyd.2\)c0
execution environment
1 cpe:2.3:h:zyxel:nr7102:-:*:*:*:*:*:*:*
Configuration23 or higher or less more than less than
cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:* 5.42\(acbc.1\)c0
execution environment
1 cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*
Configuration24 or higher or less more than less than
cpe:2.3:o:zyxel:pmg5317-t20b_firmware:*:*:*:*:*:*:*:* 5.40\(abki.4\)c0
execution environment
1 cpe:2.3:h:zyxel:pmg5317-t20b:-:*:*:*:*:*:*:*
Configuration25 or higher or less more than less than
cpe:2.3:o:zyxel:pmg5617-t20b2_firmware:*:*:*:*:*:*:*:* 5.41\(acbb.1\)c0
execution environment
1 cpe:2.3:h:zyxel:pmg5617-t20b2:-:*:*:*:*:*:*:*
Configuration26 or higher or less more than less than
cpe:2.3:o:zyxel:pmg5617ga_firmware:*:*:*:*:*:*:*:* 5.40\(abna.2\)c0
execution environment
1 cpe:2.3:h:zyxel:pmg5617ga:-:*:*:*:*:*:*:*
Configuration27 or higher or less more than less than
cpe:2.3:o:zyxel:pmg5622ga_firmware:*:*:*:*:*:*:*:* 5.40\(abnb.2\)c0
execution environment
1 cpe:2.3:h:zyxel:pmg5622ga:-:*:*:*:*:*:*:*
Configuration28 or higher or less more than less than
cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:* 5.50\(abtl.0\)b2r
execution environment
1 cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*
Configuration29 or higher or less more than less than
cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:* 5.50\(abom.8\)c0
execution environment
1 cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*
Configuration30 or higher or less more than less than
cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:* 5.50\(abpm.7\)c0
execution environment
1 cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*
Configuration31 or higher or less more than less than
cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:* 5.50\(abom.8\)c0
execution environment
1 cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*
Configuration32 or higher or less more than less than
cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:central_america:*:*:* 5.50\(accr.0\)b4
execution environment
1 cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*
Configuration33 or higher or less more than less than
cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:emea:*:*:* 5.50\(abpm.7\)c0
execution environment
1 cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List
JVN Vulnerability Information
複数の ZyXEL 製品における重要な情報の平文保存に関する脆弱性
Title 複数の ZyXEL 製品における重要な情報の平文保存に関する脆弱性
Summary

AX7501-B0 ファームウェア、DX3301-T0 ファームウェア、DX5401-B0 ファームウェア等複数の ZyXEL 製品には、重要な情報の平文保存に関する脆弱性が存在します。

Possible impacts 情報を取得される可能性があります。
Solution

ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。
Publication Date June 17, 2021, midnight
Registration Date July 17, 2024, 11:02 a.m.
Last Update July 17, 2024, 11:02 a.m.
Affected System
ZyXEL
AX7501-B0 ファームウェア 5.17(abpc.2)c0 未満
DX3301-T0 ファームウェア 5.50(abvy.3)c0 未満
DX5401-B0 ファームウェア 5.17(abyo.2)c0 未満
emg3525-t50b ファームウェア 5.50(abpm.7)c0 未満
emg5523-t50b ファームウェア 5.50(abpm.7)c0 未満
emg5723-t50k ファームウェア 5.50(abom.8)c0 未満
ep240p ファームウェア 5.40(abvh.0)c0a03 未満
ex5401-b0 ファームウェア 5.17(abyo.2)c0 未満
ex5501-b0 ファームウェア 5.17(abry.3)c0 未満
LTE3301-PLUS ファームウェア 1.00(abqu.6)c0 未満
LTE5388-M804 ファームウェア 1.00(abra.6)c0 未満
LTE5388-M904 ファームウェア 1.00(abqv.2)c0 未満
lte5388-s905 ファームウェア 1.00(abvi.6)c0 未満
LTE7240-M403 ファームウェア 2.00(abmg.6)c0 未満
LTE7461-M602 ファームウェア 2.00(abqn.6)c0 未満
LTE7480-M804 ファームウェア 1.00(abra.6)c0 未満
LTE7480-S905 ファームウェア 2.00(abqt.6)c0 未満
LTE7485-S905 ファームウェア 1.00(abvn.6)c0 未満
lte7490-m804 ファームウェア v1.00(abqy.5)c0 未満
NR5101 ファームウェア 1.00(abvc.6)c0 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
その他
Change Log
No Changed Details Date of change
1 [2024年07月17日]
  掲載		 July 17, 2024, 11:02 a.m.