{"id":"CVE-2021-3297","aliases":["EUVD-2021-26631","GHSA-vqr2-c24p-rh7p"],"status":"published","title":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator...","description":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.20514,"percentile":0.97532,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2021-01-26T07:11:41Z","modified":"2026-06-17T04:04:54Z","exploits":[{"source":"nuclei","id":"CVE-2021-3297","title":"Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3297.yaml"}],"products":[{"vendor":"zyxel","product":"nbg2105_firmware"}],"references":[{"url":"https://www.zyxel.com/us/en/support/security_advisories.shtml","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb\u0026l=en\u0026kbid=M-01490\u0026md=NBG2105","tags":["x_refsource_MISC","x_transferred","Product","Vendor Advisory"]},{"url":"https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://codeberg.org/nieldk/vulnerabilities/src/branch/main/zyxel%20nbg2105/Admin%20bypass"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3297"},{"url":"https://github.com/advisories/GHSA-vqr2-c24p-rh7p"}],"sources":{"cve":[{"id":"CVE-2021-3297","description":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.","status":"published","published":"2021-01-26T07:11:41Z","modified":"2025-11-25T17:27:20.441Z","updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26631","description":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.","status":"published","published":"2021-01-26T07:11:41Z","modified":"2025-11-25T17:27:20Z","updated_at":"2026-11-02T19:49:12.807834Z"}],"ghsa":[{"id":"GHSA-vqr2-c24p-rh7p","title":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator...","description":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.","status":"published","published":"2022-05-24T17:40:23Z","modified":"2025-11-25T18:32:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:56.426173Z"}],"nvd":[{"id":"CVE-2021-3297","description":"On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.","status":"published","published":"2021-01-26T18:16:29.77Z","modified":"2026-06-17T04:04:54.203Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:06:49.660551Z"}]}}