CVE-2021-35033 Hardcoded credentials in NBG6818 series firmware
Attackers can gain root access via physical UART connection or enabled remote assistance due to pre-configured password management flaws.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-35033?
CVE-2021-35033 is a high-severity vulnerability in Zyxel NBG6818 series firmware, published on 23 Nov 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the device, or if the remote assistance feature had been enabled by an authenticated user.
Which versions are affected by CVE-2021-35033?
It affects 6 products.
Products include Zyxel Nbg6818 Firmware, Zyxel Nbg7815 Firmware, Zyxel Wsq20 Firmware, Zyxel Wsq50 Firmware, Zyxel Wsq60 Firmware, Zyxel Wsr30 Firmware.
How do I fix CVE-2021-35033?
No fix has been published for CVE-2021-35033 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-35033 being exploited?
There is no known exploitation of CVE-2021-35033 in the wild and no public exploit code.
Sources
Also known as GHSA-pm46-rmc8-j8j3.