CVE-2022-43389
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - security@zyxel.com.tw
- Published
- 2023-01-11
- Last modified
- 2025-04-09
- Weaknesses
- CWE-120
Affected products
- Ep240p Firmware (Zyxel)
- Lte3202-m437 Firmware (Zyxel)
- Lte3316-m604 Firmware (Zyxel)
- Lte7480-m804 Firmware (Zyxel)
- Lte7490-m904 Firmware (Zyxel)
- Nebula Fwa510 Firmware (Zyxel)
- Nebula Fwa710 Firmware (Zyxel)
- Nebula Nr7101 Firmware (Zyxel)
- Nr5103 Firmware (Zyxel)
- Nr5103e Firmware (Zyxel)
- Nr7101 Firmware (Zyxel)
- Nr7102 Firmware (Zyxel)
- Nr7103 Firmware (Zyxel)
- Pm7320-b0 Firmware (Zyxel)
- Pmg5317-t20b Firmware (Zyxel)
- Pmg5617ga Firmware (Zyxel)
- Pmg5622ga Firmware (Zyxel)
References
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-ov…
