CVE-2021-3297
high · 7.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.
7.8
CVSS
20.5%
EPSS (exploit prob.)
97th
EPSS percentile
2021-01-26
Published
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zyxel | nbg2105_firmware | v1.00(aagu.2)c0 |
| zyxel | nbg2105 | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://codeberg.org/nieldk/vulnerabilities/src/branch/main/zyxel%20nbg2105/Admin%20bypass
- https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass
- https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105
- https://www.zyxel.com/us/en/support/security_advisories.shtml
- https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass
- https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105
- https://www.zyxel.com/us/en/support/security_advisories.shtml
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-3297