Zyxel Nbg6604 Series vulnerabilities

2 vulnerabilities

Known vulnerabilities in Zyxel Nbg6604 Series, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2021-35035zyxelnbg6604_firmware+1
EPSS score
0.65%
A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file.9.1CVE-2021-35034zyxelnbg6604_firmware+1
EPSS score
1.04%
An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted.