zyxel ax7501-b0_firmware 敏感数据的明文存储
CVE编号
CVE-2021-35036利用情况
暂无补丁情况
N/A披露时间
2022-03-01漏洞描述
A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-ad... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | zyxel | ax7501-b0_firmware | * | Up to (excluding) 5.17\(abpc.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | dx3301-t0_firmware | * | Up to (excluding) 5.50\(abvy.3\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | dx5401-b0_firmware | * | Up to (excluding) 5.17\(abyo.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | emg3525-t50b_firmware | * | Up to (excluding) 5.50\(abpm.7\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | emg5523-t50b_firmware | * | Up to (excluding) 5.50\(abpm.7\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | emg5723-t50k_firmware | * | Up to (excluding) 5.50\(abom.8\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | ep240p_firmware | * | Up to (excluding) 5.40\(abvh.0\)c0a03 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | ex5401-b0_firmware | * | Up to (excluding) 5.17\(abyo.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | ex5501-b0_firmware | * | Up to (excluding) 5.17\(abry.3\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte3301-plus_firmware | * | Up to (excluding) 1.00\(abqu.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte5388-m804_firmware | * | Up to (excluding) 1.00\(abra.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte5388-s905_firmware | * | Up to (excluding) 1.00\(abvi.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte5398-m904_firmware | * | Up to (excluding) 1.00\(abqv.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte7240-m403_firmware | * | Up to (excluding) 2.00\(abmg.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte7461-m602_firmware | * | Up to (excluding) 2.00\(abqn.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte7480-m804_firmware | * | Up to (excluding) 1.00\(abra.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte7480-s905_firmware | * | Up to (excluding) 2.00\(abqt.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte7485-s905_firmware | * | Up to (excluding) 1.00\(abvn.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | lte7490-m804_firmware | * | Up to (excluding) v1.00\(abqy.5\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | nr5101_firmware | * | Up to (excluding) 1.00\(abvc.6\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | nr7101_firmware | * | Up to (excluding) 1.00\(abuv.7\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | nr7102_firmware | * | Up to (excluding) 1.00\(abyd.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | pm7300-t0_firmware | * | Up to (excluding) 5.42\(acbc.1\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | pmg5317-t20b_firmware | * | Up to (excluding) 5.40\(abki.4\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | pmg5617-t20b2_firmware | * | Up to (excluding) 5.41\(acbb.1\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | pmg5617ga_firmware | * | Up to (excluding) 5.40\(abna.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | pmg5622ga_firmware | * | Up to (excluding) 5.40\(abnb.2\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | vmg3625-t50b_firmware | * | Up to (excluding) 5.50\(abpm.7\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | vmg3625-t50b_firmware | * | Up to (excluding) 5.50\(abtl.0\)b2r | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | vmg3625-t50b_firmware | * | Up to (excluding) 5.50\(accr.0\)b4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | vmg3927-t50k_firmware | * | Up to (excluding) 5.50\(abom.8\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | vmg8623-t50b_firmware | * | Up to (excluding) 5.50\(abpm.7\)c0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | zyxel | vmg8825-t50k_firmware | * | Up to (excluding) 5.50\(abom.8\)c0 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | ax7501-b0 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | dx3301-t0 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | dx5401-b0 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | emg3525-t50b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | emg5523-t50b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | emg5723-t50k | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | ep240p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | ex5401-b0 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | ex5501-b0 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte3301-plus | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte5388-m804 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte5388-s905 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte5398-m904 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte7240-m403 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte7461-m602 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte7480-m804 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte7480-s905 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte7485-s905 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | lte7490-m804 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | nr5101 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | nr7101 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | nr7102 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | pm7300-t0 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | pmg5317-t20b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | pmg5617-t20b2 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | pmg5617ga | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | pmg5622ga | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | vmg3625-t50b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | vmg3927-t50k | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | vmg8623-t50b | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | zyxel | vmg8825-t50k | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 无
- 保密性 高
- 完整性 无
| CWE-ID | 漏洞类型 |
| CWE-312 | 敏感数据的明文存储 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论