CVE-2021-3297

HIGH EXPLOITED NUCLEI

Zyxel NBG2105 V1.00(AAGU.2)C0 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-3297 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.

Nuclei Templates (1)

Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass
HIGHby gy741

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.2051
EPSS Percentile 97.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2025-08-19
CWE
CWE-287
Status published
Products (1)
zyxel/nbg2105_firmware v1.00\(aagu.2\)c0
Published Jan 26, 2021
Tracked Since Feb 18, 2026