CVE-2021-35035: Zyxel NBG6604 Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file.

Affected products

• Zyxel NBG6604 Firmware: before 1.00\(abir.9\)c0 (fixed in 1.00\(abir.9\)c0)

Published 2021-12-29. Last modified 2026-06-17.