cve.bz

CVE-2021-35033

7.8 highEPSS 0.4%

High (7.8) in zyxel. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the device, or if the remote assistance feature had been enabled by an authenticated user.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWEs
CWE-287, CWE-260
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON