Zyxel Nbg6604 vulnerabilities
4 vulnerabilities
Known vulnerabilities in Zyxel Nbg6604, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-35035zyxelnbg6604_firmware+1
EPSS score0.65%
A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file.CVE-2021-35034zyxelnbg6604_firmware+1EPSS score1.04%
An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.CVE-2023-22919zyxelnbg6604_firmware+1EPSS score1.59%
The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.CVE-2023-33013zyxelnbg6604_firmware+1EPSS score1.68%
A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.