CVE-2022-43391

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.

• zyxel lte3301-plus firmware • zyxel lte5388-m804 firmware • zyxel lte5398-m904 firmware • zyxel lte7240-m403 firmware • zyxel lte7461-m602 firmware • zyxel lte7480-m804 firmware (< 1.00\(abra.6\)c0) • zyxel lte7480-s905 firmware • zyxel lte7485-s905 firmware • zyxel lte7490-m904 firmware (< 1.00\(abqy.5\)c0) • zyxel nebula lte3301-plus firmware (< 1.15\(acca.3\)c0) • zyxel nebula lte7461-m602 firmware (< 1.15\(acev.3\)c0) • zyxel nebula nr5101 firmware (< 1.15\(accg.3\)c0) • zyxel nebula nr7101 firmware (< 1.15\(accc.3\)c0) • zyxel nr5101 firmware (< 1.00\(abvc.6\)c0) • zyxel nr7101 firmware (< 1.00\(abuv.7\)c0) • zyxel nr7102 firmware (< 1.00\(abyd.2\)c0) • zyxel dx3301-t0 firmware • zyxel dx4510-b1 firmware • zyxel dx5401-b0 firmware • zyxel emg3525-t50b firmware • zyxel emg5523-t50b firmware • zyxel emg5723-t50k firmware • zyxel ex3301-t0 firmware • zyxel ex3510-b0 firmware (< 5.17\(abup.7\)c0) • zyxel ex5401-b0 firmware • zyxel ex5501-b0 firmware • zyxel ex5510-b0 firmware (< 5.17\(abqx.7\)c0) • zyxel ex5512-t0 firmware • zyxel ex5600-t1 firmware • zyxel ex5601-t0 firmware • zyxel ex5601-t1 firmware • zyxel vmg3927-t50k firmware • zyxel vmg4005-b50a firmware • zyxel vmg4005-b60a firmware • zyxel vmg8623-t50b firmware • zyxel vmg8825-t50k firmware • zyxel ax7501-b0 firmware • zyxel pm3100-t0 firmware • zyxel pm5100-t0 firmware • zyxel pm7300-t0 firmware • zyxel pm7320-b0 firmware • zyxel pmg5317-t20b firmware • zyxel pmg5617-t20b2 firmware • zyxel pmg5617ga firmware • zyxel pmg5622ga firmware • zyxel wx3100-t0 firmware • zyxel wx3401-b0 firmware • zyxel wx5600-t0 firmware