CVEvulnerability

CVE-2022-43389

9.8 CRITICAL Published 2023-01-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.

Affected configurations

• zyxel lte3202-m437 firmware (< 1.00\(abwf.1\)c0) • zyxel lte3316-m604 firmware (< 2.00\(abmp.6\)c0) • zyxel lte7480-m804 firmware (< 1.00\(abra.6\)c0) • zyxel lte7490-m904 firmware (< 1.00\(abqy.5\)c0) • zyxel nebula fwa510 firmware (< 1.15\(acgd.3\)c0) • zyxel nebula fwa710 firmware (< 1.15\(acgc.3\)c0) • zyxel nebula nr7101 firmware (< 1.15\(accc.3\)c0) • zyxel nr5103 firmware (< 4.19\(abyc.3\)c0) • zyxel nr5103e firmware • zyxel nr7101 firmware (< 1.00\(abuv.7\)c0) • zyxel nr7102 firmware (< 1.00\(abyd.2\)c0) • zyxel nr7103 firmware (< 1.00\(accz.1\)c0) • zyxel ep240p firmware • zyxel pm7320-b0 firmware • zyxel pmg5317-t20b firmware • zyxel pmg5617ga firmware • zyxel pmg5622ga firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References