Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-29	CVE-2021-35034	Insufficient Session Expiration vulnerability in Zyxel Nbg6604 Firmware An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted. network low complexity zyxel CWE-613	6.4
2021-12-29	CVE-2021-35035	Cleartext Storage of Sensitive Information vulnerability in Zyxel Nbg6604 Firmware A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file. network low complexity zyxel CWE-312	4.0