CVE-2021-35036 Information disclosure in VMG3625-T50B firmware

Medium 6.5 Published 1 Mar 2022 Updated 4 Aug 2024

An authenticated attacker can read sensitive information from the configuration file due to cleartext storage in Zyxel router firmware.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-35036?

CVE-2021-35036 is a medium-severity vulnerability in Zyxel VMG3625-T50B firmware, published on 1 Mar 2022. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

Weakness: CWE-312

Which versions are affected by CVE-2021-35036?

It affects 31 products.

Products include Zyxel Ax7501-B0 Firmware, Zyxel Dx3301-T0 Firmware, Zyxel Dx5401-B0 Firmware, Zyxel Emg3525-T50b Firmware, Zyxel Emg5523-T50b Firmware, Zyxel Emg5723-T50k Firmware and 25 more.

How do I fix CVE-2021-35036?

No fix has been published for CVE-2021-35036 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-35036 being exploited?

There is no known exploitation of CVE-2021-35036 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

Sources

Also known as GHSA-pp3g-h9w2-v7g4.