CVEvulnerability

CVE-2023-27989

6.5 MEDIUM Published 2023-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-120

Description

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker to cause denial of service (DoS) conditions by sending a crafted HTTP request to a vulnerable device.

Affected configurations

• zyxel lte7480-m804 firmware (<= 1.00\(abra.6\)c0) • zyxel lte7490-m904 firmware (<= 1.00\(abqy.5\)c0) • zyxel nr7101 firmware (<= 1.00\(abuv.7\)c0) • zyxel nebula nr7101 firmware (<= 1.15\(accc.3\)c0)

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References