medium6.5
CVE-2022-43391
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attac…
Impact
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Lte3301-Plus Firmware | All versions |
| Zyxel | Lte5388-M804 Firmware | All versions |
| Zyxel | Lte5398-M904 Firmware | All versions |
| Zyxel | Lte7240-M403 Firmware | All versions |
| Zyxel | Lte7461-M602 Firmware | All versions |
| Zyxel | Lte7480-M804 Firmware | before 1.00\(abra.6\)c0 |
| Zyxel | Lte7480-S905 Firmware | All versions |
| Zyxel | Lte7485-S905 Firmware | All versions |
| Zyxel | Lte7490-M904 Firmware | before 1.00\(abqy.5\)c0 |
| Zyxel | Nebula Lte3301-Plus Firmware | before 1.15\(acca.3\)c0 |
| Zyxel | Nebula Lte7461-M602 Firmware | before 1.15\(acev.3\)c0 |
| Zyxel | Nebula Nr5101 Firmware | before 1.15\(accg.3\)c0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
- https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders