GCVE - cpe:2.3:h:zyxel:nbg6604:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:zyxel:nbg6604:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Zyxel (`d3fcf896-5708-55f8-8f74-3e19a9d55b89`)
Product	Nbg6604 (`b45e44fe-3872-51f7-b8c9-53e72a34df65`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-33013`	not_vulnerable	2026-06-08 06:04:48.307992	Details available HIGH (8.8) A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request. Published: 2023-08-14T16:16:32.142Z Updated: 2024-10-09T16:12:00.346Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-in-ntp-feature-of-nbg6604-home-router	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-22919`	not_vulnerable	2026-06-08 05:54:27.449555	Details available HIGH (8.8) The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request. Published: 2023-05-01T00:00:00.000Z Updated: 2025-01-30T16:53:59.371Z Open on db.gcve.eu Reference links https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35035`	not_vulnerable	2026-06-08 05:32:17.491068	Details available MEDIUM (4.9) A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtain sensitive information from the configuration file. Published: 2021-12-29T12:45:38.000Z Updated: 2024-08-04T00:33:49.910Z Open on db.gcve.eu Reference links https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35034`	not_vulnerable	2026-06-08 05:32:17.490593	Details available HIGH (7.4) An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted. Published: 2021-12-29T12:36:47.000Z Updated: 2024-08-04T00:33:49.919Z Open on db.gcve.eu Reference links https://www.zyxel.com/support/Zyxel_security_advisory_for_sensitive_information_vulnerabilities_of_NBG6604_home_router.shtml	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.