Lucene search

[email protected]CVE-2022-43389

HistoryJan 11, 2023 - 2:15 a.m.

CVE-2022-43389

2023-01-1102:15:11

CWE-120

[email protected]

web.nvd.nist.gov

cve-2022-43389

buffer overflow

web server

zyxel nr7101

firmware

vulnerability

os commands

denial-of-service (dos)

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.

Affected configurations

NVD

Node

zyxellte3202-m437Match-

AND

zyxellte3202-m437_firmwareRange<1.00\(abwf.1\)c0

Node

zyxellte3316-m604Match-

AND

zyxellte3316-m604_firmwareRange<2.00\(abmp.6\)c0

Node

zyxellte7480-m804Match-

AND

zyxellte7480-m804_firmwareRange<1.00\(abra.6\)c0

Node

zyxellte7490-m904Match-

AND

zyxellte7490-m904_firmwareRange<1.00\(abqy.5\)c0

Node

zyxelnebula_fwa510_firmwareRange<1.15\(acgd.3\)c0

AND

zyxelnebula_fwa510Match-

Node

zyxelnebula_fwa710_firmwareRange<1.15\(acgc.3\)c0

AND

zyxelnebula_fwa710Match-

Node

zyxelnebula_nr7101_firmwareRange<1.15\(accc.3\)c0

AND

zyxelnebula_nr7101Match-

Node

zyxelnr5103_firmwareRange<4.19\(abyc.3\)c0

AND

zyxelnr5103Match-

Node

zyxelnr5103e_firmwareMatch-

AND

zyxelnr5103eMatch-

Node

zyxelnr7101_firmwareRange<1.00\(abuv.7\)c0

AND

zyxelnr7101Match-

Node

zyxelnr7102_firmwareRange<1.00\(abyd.2\)c0

AND

zyxelnr7102Match-

Node

zyxelnr7103_firmwareRange<1.00\(accz.1\)c0

AND

zyxelnr7103Match-

Node

zyxelep240p_firmwareMatch-

AND

zyxelep240pMatch-

Node

zyxelpm7320-b0_firmwareMatch-

AND

zyxelpm7320-b0Match-

Node

zyxelpmg5317-t20b_firmwareMatch-

AND

zyxelpmg5317-t20bMatch-

Node

zyxelpmg5617ga_firmwareMatch-

AND

zyxelpmg5617gaMatch-

Node

zyxelpmg5622ga_firmwareMatch-

AND

zyxelpmg5622gaMatch-

CPENameOperatorVersion
zyxel:lte3202-m437_firmwarezyxel lte3202-m437 firmwarelt1.00\(abwf.1\)c0

CPE	Name	Operator	Version
zyxel:lte3202-m437_firmware	zyxel lte3202-m437 firmware	lt	1.00\(abwf.1\)c0

CNA Affected

[
  {
    "vendor": "Zyxel",
    "product": "NR7101 firmware",
    "versions": [
      {
        "version": "< V1.15(ACCC.3)C0",
        "status": "affected"
      }
    ]
  }
]

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

Related for CVE-2022-43389

prion1 nvd1 cvelist1 thn1