high8.6
CVE-2022-43389
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attack…
Impact
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Lte3202-M437 Firmware | before 1.00\(abwf.1\)c0 |
| Zyxel | Lte3316-M604 Firmware | before 2.00\(abmp.6\)c0 |
| Zyxel | Lte7480-M804 Firmware | before 1.00\(abra.6\)c0 |
| Zyxel | Lte7490-M904 Firmware | before 1.00\(abqy.5\)c0 |
| Zyxel | Nebula Fwa510 Firmware | before 1.15\(acgd.3\)c0 |
| Zyxel | Nebula Fwa710 Firmware | before 1.15\(acgc.3\)c0 |
| Zyxel | Nebula Nr7101 Firmware | before 1.15\(accc.3\)c0 |
| Zyxel | Nr5103 Firmware | before 4.19\(abyc.3\)c0 |
| Zyxel | Nr5103e Firmware | All versions |
| Zyxel | Nr7101 Firmware | before 1.00\(abuv.7\)c0 |
| Zyxel | Nr7102 Firmware | before 1.00\(abyd.2\)c0 |
| Zyxel | Nr7103 Firmware | before 1.00\(accz.1\)c0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders