Read the docs
TI-2021-14002 Aliases CVE-2021-35036GHSA-pp3g-h9w2-v7g4

Cleartext storage of sensitive information in Zyxel VMG3625-T50B firmware

Priority LOW 29CWE-312Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-312.

Summary

A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allow an authenticated attacker to obtain sensitive information from the configuration file.

Why it matters now

EPSS 0.00488 42nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ZyxelVMG3625-T50B firmwareV5.50(ABTL.0)b2k—No fix listedCNA
  • VMG3625-T50B firmware VendorZyxel Affected V5.50(ABTL.0)b2k Fixed in — No fix listed CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:*before 5.17\(abpc.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:*before 5.50\(abvy.3\)c0VulnerableZyxel
cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:*before 5.17\(abyo.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:*before 5.50\(abpm.7\)c0VulnerableZyxel
cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:*before 5.50\(abpm.7\)c0VulnerableZyxel
cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
  • cpe:2.3:o:zyxel:ax7501-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abpc.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:ax7501-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:dx3301-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abvy.3\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:dx3301-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:dx5401-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyo.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:dx5401-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:emg3525-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.7\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:emg3525-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:emg5523-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.7\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:emg5523-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:*before 5.50\(abom.8\)c0VulnerableZyxel
cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:ep240p_firmware:*:*:*:*:*:*:*:*before 5.40\(abvh.0\)c0a03VulnerableZyxel
cpe:2.3:h:zyxel:ep240p:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:*before 5.17\(abyo.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:*before 5.17\(abry.3\)c0VulnerableZyxel
cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte3301-plus_firmware:*:*:*:*:*:*:*:*before 1.00\(abqu.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte3301-plus:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte5388-m804_firmware:*:*:*:*:*:*:*:*before 1.00\(abra.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte5388-m804:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte5388-s905_firmware:*:*:*:*:*:*:*:*before 1.00\(abvi.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte5388-s905:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte5398-m904_firmware:*:*:*:*:*:*:*:*before 1.00\(abqv.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte5398-m904:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte7240-m403_firmware:*:*:*:*:*:*:*:*before 2.00\(abmg.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte7240-m403:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte7461-m602_firmware:*:*:*:*:*:*:*:*before 2.00\(abqn.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte7461-m602:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:*before 1.00\(abra.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte7480-s905_firmware:*:*:*:*:*:*:*:*before 2.00\(abqt.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte7480-s905:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte7485-s905_firmware:*:*:*:*:*:*:*:*before 1.00\(abvn.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte7485-s905:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:lte7490-m804_firmware:*:*:*:*:*:*:*:*before v1.00\(abqy.5\)c0VulnerableZyxel
cpe:2.3:h:zyxel:lte7490-m804:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:nr5101_firmware:*:*:*:*:*:*:*:*before 1.00\(abvc.6\)c0VulnerableZyxel
cpe:2.3:h:zyxel:nr5101:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:*before 1.00\(abuv.7\)c0VulnerableZyxel
cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:nr7102_firmware:*:*:*:*:*:*:*:*before 1.00\(abyd.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:nr7102:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:*before 5.42\(acbc.1\)c0VulnerableZyxel
cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:pmg5317-t20b_firmware:*:*:*:*:*:*:*:*before 5.40\(abki.4\)c0VulnerableZyxel
cpe:2.3:h:zyxel:pmg5317-t20b:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:pmg5617-t20b2_firmware:*:*:*:*:*:*:*:*before 5.41\(acbb.1\)c0VulnerableZyxel
cpe:2.3:h:zyxel:pmg5617-t20b2:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:pmg5617ga_firmware:*:*:*:*:*:*:*:*before 5.40\(abna.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:pmg5617ga:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:pmg5622ga_firmware:*:*:*:*:*:*:*:*before 5.40\(abnb.2\)c0VulnerableZyxel
cpe:2.3:h:zyxel:pmg5622ga:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:*before 5.50\(abtl.0\)b2rVulnerableZyxel
cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:*before 5.50\(abom.8\)c0VulnerableZyxel
cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:*before 5.50\(abpm.7\)c0VulnerableZyxel
cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:*before 5.50\(abom.8\)c0VulnerableZyxel
cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:*not specified by NVDRunning onZyxel
cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:central_america:*:*:*before 5.50\(accr.0\)b4VulnerableZyxel
cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:emea:*:*:*before 5.50\(abpm.7\)c0VulnerableZyxel
  • cpe:2.3:o:zyxel:emg5723-t50k_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abom.8\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:emg5723-t50k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:ep240p_firmware:*:*:*:*:*:*:*:* Versions before 5.40\(abvh.0\)c0a03 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:ep240p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:ex5401-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abyo.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:ex5401-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:ex5501-b0_firmware:*:*:*:*:*:*:*:* Versions before 5.17\(abry.3\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:ex5501-b0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte3301-plus_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abqu.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte3301-plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte5388-m804_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abra.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte5388-m804:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte5388-s905_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abvi.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte5388-s905:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte5398-m904_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abqv.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte5398-m904:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte7240-m403_firmware:*:*:*:*:*:*:*:* Versions before 2.00\(abmg.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte7240-m403:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte7461-m602_firmware:*:*:*:*:*:*:*:* Versions before 2.00\(abqn.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte7461-m602:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte7480-m804_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abra.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte7480-m804:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte7480-s905_firmware:*:*:*:*:*:*:*:* Versions before 2.00\(abqt.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte7480-s905:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte7485-s905_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abvn.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte7485-s905:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:lte7490-m804_firmware:*:*:*:*:*:*:*:* Versions before v1.00\(abqy.5\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:lte7490-m804:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:nr5101_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abvc.6\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:nr5101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:nr7101_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abuv.7\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:nr7101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:nr7102_firmware:*:*:*:*:*:*:*:* Versions before 1.00\(abyd.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:nr7102:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:pm7300-t0_firmware:*:*:*:*:*:*:*:* Versions before 5.42\(acbc.1\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:pm7300-t0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:pmg5317-t20b_firmware:*:*:*:*:*:*:*:* Versions before 5.40\(abki.4\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:pmg5317-t20b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:pmg5617-t20b2_firmware:*:*:*:*:*:*:*:* Versions before 5.41\(acbb.1\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:pmg5617-t20b2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:pmg5617ga_firmware:*:*:*:*:*:*:*:* Versions before 5.40\(abna.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:pmg5617ga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:pmg5622ga_firmware:*:*:*:*:*:*:*:* Versions before 5.40\(abnb.2\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:pmg5622ga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abtl.0\)b2r Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:vmg3625-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:vmg3927-t50k_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abom.8\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:vmg3927-t50k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:vmg8623-t50b_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abpm.7\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:vmg8623-t50b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:vmg8825-t50k_firmware:*:*:*:*:*:*:*:* Versions before 5.50\(abom.8\)c0 Vulnerable ·Zyxel
  • cpe:2.3:h:zyxel:vmg8825-t50k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Zyxel
  • cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:central_america:*:*:* Versions before 5.50\(accr.0\)b4 Vulnerable ·Zyxel
  • cpe:2.3:o:zyxel:vmg3625-t50b_firmware:*:*:*:*:emea:*:*:* Versions before 5.50\(abpm.7\)c0 Vulnerable ·Zyxel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-35036
  2. 2026-10-03 Alias added: GHSA-pp3g-h9w2-v7g4

References

Advisory 1

  • TI-2025-07956 OS command injection in Zyxel DX3300-T0 firmware CVSS 3.1HIGH 8.8
  • TI-2022-21188 OS command injection in Zyxel NR7101 firmware CVSS 3.1HIGH 8.8
  • TI-2024-05028 Buffer overflow in Zyxel VMG8825-T50K firmware CVSS 3.1HIGH 7.5
  • TI-2025-05994 Uncontrolled resource consumption in Zyxel DX3301-T0 firmware CVSS 3.1HIGH 7.5
  • TI-2024-08115 Buffer overflow in Zyxel VMG8825-T50K firmware CVSS 3.1HIGH 7.5
  • TI-2024-11143 OS command injection in Zyxel AX7501-B1 firmware CVSS 3.1HIGH 7.2
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences